From ee14bed3d93da9120e16c742443d2414f68634da Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Thu, 19 Jan 2023 14:34:59 +0100 Subject: [PATCH] relax nsjail limits --- backend/windmill-worker/nsjail/run.bash.config.proto | 8 ++------ backend/windmill-worker/nsjail/run.deno.config.proto | 6 +----- backend/windmill-worker/nsjail/run.go.config.proto | 6 +----- backend/windmill-worker/nsjail/run.python3.config.proto | 6 +----- 4 files changed, 5 insertions(+), 21 deletions(-) diff --git a/backend/windmill-worker/nsjail/run.bash.config.proto b/backend/windmill-worker/nsjail/run.bash.config.proto index e93e6b4557..1862ac6b8d 100644 --- a/backend/windmill-worker/nsjail/run.bash.config.proto +++ b/backend/windmill-worker/nsjail/run.bash.config.proto @@ -3,12 +3,8 @@ name: "bash run script" mode: ONCE hostname: "bash" log_level: ERROR -time_limit: 300 -rlimit_as: 2048 -rlimit_cpu: 1000 -rlimit_fsize: 1024 -rlimit_nofile: 64 +rlimit_nofile: 10000 cwd: "/tmp" @@ -87,4 +83,4 @@ iface_no_lo: true {SHARED_MOUNT} - +envar: "HOME=/tmp" diff --git a/backend/windmill-worker/nsjail/run.deno.config.proto b/backend/windmill-worker/nsjail/run.deno.config.proto index 9f106c231f..7ea972d8a7 100644 --- a/backend/windmill-worker/nsjail/run.deno.config.proto +++ b/backend/windmill-worker/nsjail/run.deno.config.proto @@ -3,12 +3,8 @@ name: "deno run script" mode: ONCE hostname: "deno" log_level: ERROR -time_limit: 300 -rlimit_as: 16000 -rlimit_cpu: 1000 -rlimit_fsize: 1024 -rlimit_nofile: 64 +rlimit_nofile: 10000 cwd: "/tmp" diff --git a/backend/windmill-worker/nsjail/run.go.config.proto b/backend/windmill-worker/nsjail/run.go.config.proto index 3af548d18c..116c861b07 100644 --- a/backend/windmill-worker/nsjail/run.go.config.proto +++ b/backend/windmill-worker/nsjail/run.go.config.proto @@ -3,12 +3,8 @@ name: "go run script" mode: ONCE hostname: "go" log_level: ERROR -time_limit: 300 -rlimit_as: 2048 -rlimit_cpu: 1000 -rlimit_fsize: 1024 -rlimit_nofile: 64 +rlimit_nofile: 10000 cwd: "/tmp/go" diff --git a/backend/windmill-worker/nsjail/run.python3.config.proto b/backend/windmill-worker/nsjail/run.python3.config.proto index 5747d3cb3f..80865ac0c4 100644 --- a/backend/windmill-worker/nsjail/run.python3.config.proto +++ b/backend/windmill-worker/nsjail/run.python3.config.proto @@ -3,12 +3,8 @@ name: "python run script" mode: ONCE hostname: "python" log_level: ERROR -time_limit: 300 -rlimit_as: 2048 -rlimit_cpu: 1000 -rlimit_fsize: 1024 -rlimit_nofile: 64 +rlimit_nofile: 10000 cwd: "/tmp"