starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-09-05 08:02:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

add urandom and all /etc to nsjail

Browse Source
This commit is contained in:
Ruben Fiszel
2022-11-25 19:05:41 +01:00
parent d7757dbe74
commit 65a535eb86
5 changed files with 34 additions and 119 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/windmill-worker/nsjail/download.py.config.proto
+2 -22
View File
@@ -46,28 +46,8 @@ mount {
}
mount {
src: "/etc/ssl"
dst: "/etc/ssl"
is_bind: true
}
mount {
src: "/etc/pki"
dst: "/etc/pki"
is_bind: true
mandatory: false
}
mount {
src: "/etc/ca-certificates"
dst: "/etc/ca-certificates"
is_bind: true
mandatory: false
}
mount {
src: "/etc/resolv.conf"
dst: "/etc/resolv.conf"
src: "/etc"
dst: "/etc"
is_bind: true
}
backend/windmill-worker/nsjail/run.bash.config.proto
+8 -30
View File
@@ -66,36 +66,8 @@ mount {
}
mount {
src: "/etc/ssl"
dst: "/etc/ssl"
is_bind: true
}
mount {
src: "/etc/ld.so.cache"
dst: "/etc/ld.so.cache"
is_bind: true
mandatory: false
}
mount {
src: "/etc/pki"
dst: "/etc/pki"
is_bind: true
mandatory: false
}
mount {
src: "/etc/ca-certificates"
dst: "/etc/ca-certificates"
is_bind: true
mandatory: false
}
mount {
src: "/etc/resolv.conf"
dst: "/etc/resolv.conf"
src: "/etc"
dst: "/etc"
is_bind: true
}
@@ -105,6 +77,12 @@ mount {
is_bind: true
}
mount {
src: "/dev/urandom"
dst: "/dev/urandom"
is_bind: true
}
iface_no_lo: true
{SHARED_MOUNT}
backend/windmill-worker/nsjail/run.deno.config.proto
+8 -22
View File
@@ -93,28 +93,8 @@ mount {
}
mount {
src: "/etc/ssl"
dst: "/etc/ssl"
is_bind: true
}
mount {
src: "/etc/pki"
dst: "/etc/pki"
is_bind: true
mandatory: false
}
mount {
src: "/etc/ca-certificates"
dst: "/etc/ca-certificates"
is_bind: true
mandatory: false
}
mount {
src: "/etc/resolv.conf"
dst: "/etc/resolv.conf"
src: "/etc"
dst: "/etc"
is_bind: true
}
@@ -124,6 +104,12 @@ mount {
is_bind: true
}
mount {
src: "/dev/urandom"
dst: "/dev/urandom"
is_bind: true
}
mount {
src: "{CACHE_DIR}"
dst: "/tmp/.cache/deno"
backend/windmill-worker/nsjail/run.go.config.proto
+8 -23
View File
@@ -79,30 +79,9 @@ mount {
is_bind: true
}
mount {
src: "/etc/ssl"
dst: "/etc/ssl"
is_bind: true
}
mount {
src: "/etc/pki"
dst: "/etc/pki"
is_bind: true
mandatory: false
}
mount {
src: "/etc/ca-certificates"
dst: "/etc/ca-certificates"
is_bind: true
mandatory: false
}
mount {
src: "/etc/resolv.conf"
dst: "/etc/resolv.conf"
src: "/etc"
dst: "/etc"
is_bind: true
}
@@ -112,6 +91,12 @@ mount {
is_bind: true
}
mount {
src: "/dev/urandom"
dst: "/dev/urandom"
is_bind: true
}
iface_no_lo: true
mount {
backend/windmill-worker/nsjail/run.python3.config.proto
+8 -22
View File
@@ -92,28 +92,8 @@ mount {
}
mount {
src: "/etc/ssl"
dst: "/etc/ssl"
is_bind: true
}
mount {
src: "/etc/pki"
dst: "/etc/pki"
is_bind: true
mandatory: false
}
mount {
src: "/etc/ca-certificates"
dst: "/etc/ca-certificates"
is_bind: true
mandatory: false
}
mount {
src: "/etc/resolv.conf"
dst: "/etc/resolv.conf"
src: "/etc"
dst: "/etc"
is_bind: true
}
@@ -123,6 +103,12 @@ mount {
is_bind: true
}
mount {
src: "/dev/urandom"
dst: "/dev/urandom"
is_bind: true
}
{SHARED_MOUNT}
{SHARED_DEPENDENCIES}