sandbox

Documentation

Index

• func Handle(args []string) error
• func RunEmbedded(sealed []byte, args []string) int
• type PackBlob
• type PackFile

Functions

func Handle

func Handle(args []string) error

Handle is the production entry for kool sandbox.

func RunEmbedded

func RunEmbedded(sealed []byte, args []string) int

RunEmbedded decrypts a sealed pack payload, materializes files under a session directory, applies packed env + SANDBOX_ROOT, executes the guest command with cwd at the materialize root, then removes the session directory.

args are the sealed binary's argv after the program name (os.Args[1:]). A leading "--" is skipped. Returns the guest process exit code (or a non-zero code on runner errors).

Types

type PackBlob

type PackBlob struct {
	Version   int               `json:"version"`
	Name      string            `json:"name"`
	CreatedAt time.Time         `json:"created_at"`
	ExpiresAt *time.Time        `json:"expires_at,omitempty"`
	Comment   string            `json:"comment,omitempty"`
	Files     []PackFile        `json:"files"`
	Env       map[string]string `json:"env"`
}

PackBlob is the cleartext payload sealed into a sandbox binary.

type PackFile

type PackFile struct {
	Path    string `json:"path"`
	Mode    uint32 `json:"mode"`
	Content []byte `json:"content"`
}

PackFile is one packed file entry.