Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Bubblewrap implementation for sandboxing #153

Open
wants to merge 21 commits into
base: master
Choose a base branch
from
Open

Add Bubblewrap implementation for sandboxing #153

wants to merge 21 commits into from

Commits on Dec 10, 2023

  1. Add Bubblewrap implementation for sandboxing

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    79e4852 View commit details
    Browse the repository at this point in the history

  2. Add tests for bubblewrap sandboxing

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    588e504 View commit details
    Browse the repository at this point in the history

  3. Remove redundant calls to Path

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    9ef250e View commit details
    Browse the repository at this point in the history

  4. Only bind gpfs sw if it exists

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    22d80af View commit details
    Browse the repository at this point in the history

  5. Split bind mount string in two

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    b47ccd0 View commit details
    Browse the repository at this point in the history

  6. Split bubblewrap args from command with explicit --

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    4922106 View commit details
    Browse the repository at this point in the history

  7. Integrate bubblewrap with extract_in_subprocess

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    b7cee2a View commit details
    Browse the repository at this point in the history

  8. Do not sandbox during fixture setup

    @RobertRosca
    RobertRosca committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    63867b9 View commit details
    Browse the repository at this point in the history

Commits on Dec 11, 2023

  1. Bind mount /tmp into bubblewrap 

    Required as temporary directory is used for storing some data
    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    c47ec31 View commit details
    Browse the repository at this point in the history

  2. Install bubblewrap in test environment

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    261a5df View commit details
    Browse the repository at this point in the history

  3. Add tests for read/write permissions/uid in sandbox

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    cc85af3 View commit details
    Browse the repository at this point in the history

  4. Add and propagate "--no-sandbox" flag

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    afbca2e View commit details
    Browse the repository at this point in the history

  5. Explicitly bind out path in to bubblewrap

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    e614782 View commit details
    Browse the repository at this point in the history

  6. Test propagation of --no-sandbox

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    2bbaa01 View commit details
    Browse the repository at this point in the history

  7. Test bwrap call generated by extract_in_subprocess

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    c8b2731 View commit details
    Browse the repository at this point in the history

  8. Propagate sandbox flag to reprocess

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    1866b3a View commit details
    Browse the repository at this point in the history

  9. Import from future for older python

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    6551b2c View commit details
    Browse the repository at this point in the history

  10. Append no sandbox flag to command list

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    f978ad1 View commit details
    Browse the repository at this point in the history

  11. Mount in cwd for context/db, add note on file mounts

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    a1910a9 View commit details
    Browse the repository at this point in the history

  12. Add todo on mounting in the actual context file and db instead of cwd

    @RobertRosca
    RobertRosca committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    2a8033b View commit details
    Browse the repository at this point in the history

Commits on Dec 20, 2023

  1. Fix reprocess --no-sandbox flag negation

    @RobertRosca
    RobertRosca committed Dec 20, 2023
    Configuration menu
    Copy the full SHA
    8a7e81b View commit details
    Browse the repository at this point in the history