mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-24 00:03:53 +00:00

Files

T

Ruben FiszelandClaude Opus 4.6 c69dd024e4 test(sandbox_setup): add nsjail integration tests, fix overlay mount ordering

Add 6 nsjail integration tests that verify actual sandbox execution:
- basic bash execution
- volume read (bind-mount data into sandbox)
- volume write-back (sandbox writes to bind-mounted volume)
- overlay root (snapshot rootfs as sandbox root)
- overlay root + volume mount combined
- result.json output from sandbox

Fix a bug in finalize_nsjail_config where the overlay root mount
(dst: "/") was placed last in the config (via {SHARED_MOUNT}). nsjail
applies mounts in order, so a root bind mount after tmpfs/bind mounts
would overwrite them. The root mount is now moved to be the first mount
block, ensuring subsequent mounts layer correctly on top.

Also add 2 #[ignore] tests for mount_overlay (needs root) and
build_snapshot (needs crane CLI).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-17 19:01:57 +00:00

nsjail

feat(uv): index resolve strategy (#7885 )

2026-02-11 11:18:51 +00:00

src

test(sandbox_setup): add nsjail integration tests, fix overlay mount ordering

2026-02-17 19:01:57 +00:00

build.rs

refactor: isolate deno_core into windmill-runtime-nativets subcrate (#7848 )

2026-02-08 09:16:37 +00:00

Cargo.toml

feat(backend): add sandbox snapshots & volumes for nsjail