Skip to content

feat: run code in 'isolate' sandbox #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
dotoleeoak merged 36 commits into from
Mar 26, 2025
Merged

feat: run code in 'isolate' sandbox #5

dotoleeoak merged 36 commits into from
Mar 26, 2025

Conversation

@dotoleeoak
Copy link
Member

@dotoleeoak dotoleeoak commented Mar 26, 2025 •
edited
Loading

기존의 exec.Command 대신 isolate를 이용해서 sandbox 내에 코드를 격리하여 실행합니다.

TODO: 실행 시간 및 리소스 제한하기

Demo: http://13.209.42.247/

isolate 실행법

isolate --init  # 초기화
isolate --run -- <binary>
isolate --cleanup

Testing

1. fork()

image

2. Access directory

isolate에서 접근 허용하는 디렉토리만 출력됨

image

dotoleeoak added 28 commits March 25, 2025 13:17
@dotoleeoak
fix: use current hostname to connect ws from frontend
4236407
@dotoleeoak
feat: automatically build and push backend image with gha
fe686fb
@dotoleeoak
fix: pod-manager build failure
34e20f2
@dotoleeoak
feat: use dind in backend
4b7c7ed
@dotoleeoak
feat: run c code in docker sandbox
112bbaf
@dotoleeoak
fix: checkout code in gha
01d3b8b
@dotoleeoak
fix: add docker.go to build server
545696f
@dotoleeoak
fix: add permission to push image to gha
1042396
@dotoleeoak
feat: apply cache to gha docker build
04438f7
@dotoleeoak
feat: test logging in persistent volume
3ec3271
@dotoleeoak
feat: build backend and k8s image in gha
b433ab9
@dotoleeoak
feat: use gha built image for pod-manager
76782a6
@dotoleeoak
fix: use single dimension matrix in gha
ade6c2f
@dotoleeoak
fix: use host path
fc458db
@dotoleeoak
chore: test if msg can be sent to client directly
423e342
@dotoleeoak
fix: syntax error
e5551ce
@dotoleeoak
fix: disable sandbox
2f7af12
@dotoleeoak
test: send json
63d8c30
@dotoleeoak
feat: add logs
fa4cc78
@dotoleeoak
feat: log error
213f247
@dotoleeoak
feat: mount docker socket
1e2dd67
@dotoleeoak
test: list files under /var/run
d2aa6aa
@dotoleeoak
test: skip deleting pod
729483f
@dotoleeoak
feat: use ioi/isolate for sandboxing code
a6640e1
@dotoleeoak
feat: add build phase to backend dockerfile
8a4bcb1
@dotoleeoak
chore: tidy go.mod
57ad650
@dotoleeoak
chore: remove redundant code
7b37e0d
@dotoleeoak
chore: use latest tag on image
ea459ca
@dotoleeoak dotoleeoak requested a review from donghun1214 March 26, 2025 12:08
@dotoleeoak dotoleeoak self-assigned this Mar 26, 2025
donghun1214
donghun1214 approved these changes Mar 26, 2025
View reviewed changes
Copy link
Contributor

@donghun1214 donghun1214 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

그는 갓인가..??

@dotoleeoak dotoleeoak merged commit 9545808 into main Mar 26, 2025
3 checks passed
@dotoleeoak dotoleeoak deleted the run-code-in-docker-sandbox branch March 28, 2025 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@donghun1214 donghun1214 donghun1214 approved these changes

Assignees

@dotoleeoak dotoleeoak

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@dotoleeoak @donghun1214