tree c37541c7bb9dd400c3b64e7432a45c6581df80ce
parent b4802e8fc459a4de0262deb5a6d320e4f87e572e
author Julie Qiu <julie@golang.org> 1675306617 -0500
committer Gopher Robot <gobot@golang.org> 1675380093 +0000

internal/sandbox: add package

Package sandbox is added to allow the worker to run go tools and
analyses in a sandbox.

This package exports the Run function, which can run any program
with arguments inside a sandbox.

The sandbox is established with gvisor's runsc program.
For more on gvisor, see https://gvisor.dev.

The testdata directory holds a minimal bundle for testing.

Because the test requires some setup, and must be run as root,
there is a Makefile that does all the work. Test this package
using `make`, not `go test`.

Change-Id: I797b711a087acc91932964c1b03e1352500a79e4
Reviewed-on: https://go-review.googlesource.com/c/pkgsite-metrics/+/464620
Reviewed-by: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
Run-TryBot: Julie Qiu <julieqiu@google.com>