cvisor 0.1.0-x86_64-linux-musl → 0.2.0-x86_64-linux-musl

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3e983fc78cc4f7cdb9d04456f9f2060fd9cbd6f2c1be9116cdd056ba0ce25bf6
-  data.tar.gz: 0f96222560cfcea664a21c59ce7222a27576fddfe118dd9659c09e9f256398a8
+  metadata.gz: 7349bc76588bd03fd93a0e5f745fef82700fa1bae7e6531280947c7c87573bba
+  data.tar.gz: 4103d75dcb922bd6599e986fd700697d1803b309f3db0539cd04ec05db828e8e
 SHA512:
-  metadata.gz: ba864664965840e7212c1661617a254a5dc7b4b0d8c7177fa4fc1a186d675c94c5103a94024eb50d4d524678a26daadb87cae834f187c2c87a7d158697e2cba4
-  data.tar.gz: b136f6e692c27db9e8e6861f954eecfcd3f80672fde8ad208ba4a57d3d501aadf8016e7f23ba9fbef2751a557cd69b2ddc118288c5b76bfb6fa49d349e7009ea
+  metadata.gz: ad2ede5fe2200c27f45794d82cce9b535b018fea4946e39b6ec4d3ea8970aaf1b59924961cd4f8189453b084c6f73228617d62647709ea2ebf504fa19deb7490
+  data.tar.gz: 00db936505362b486b340e8a3c54ed7d94188cc2977b4e0f9467e85516d1587585c0806fbbc381c8654fe93bf52cc7d305ae43ae189f877e6efdae959bf7b863

data/README.md

@@ -9,13 +9,29 @@ require "cvisor"
 
 sb = Cvisor::Sandbox.new
 out = sb.run("echo hello")
-puts out.stdout   # "hello\n"
-puts out.stderr   # ""
+puts out.stdout    # "hello\n"
+puts out.stderr    # ""
+puts out.exit_code # 0
 ```
 
-`Sandbox#run(cmd)` blocks until the sandboxed command exits and returns an
-`Output` with `#stdout` / `#stderr` (String) and `#stdout_bytes` /
-`#stderr_bytes`.
+`Sandbox#run(cmd, timeout_ms: nil)` blocks until the sandboxed command exits and
+returns an `Output` with `#stdout` / `#stderr` (String), `#stdout_bytes` /
+`#stderr_bytes`, and `#exit_code` (Integer, shell convention: status, or
+128+signo when killed by a signal).
+
+Pass a positive `timeout_ms:` to SIGKILL the guest after that many
+milliseconds; a timed-out run reports exit code 137:
+
+```ruby
+sb.run("sleep 30", timeout_ms: 300).exit_code  # 137
+```
+
+`Sandbox#set_allow_network(allow)` toggles outbound INET/INET6 networking for
+the sandbox (allowed by default):
+
+```ruby
+sb.set_allow_network(false)  # deny outbound networking
+```
 
 ## Interactive console
 

data/lib/cvisor.rb

@@ -27,8 +27,11 @@ module Cvisor
     extern "void* cvisor_sandbox_new(void)"
     extern "void cvisor_sandbox_free(void*)"
     extern "void cvisor_sandbox_set_log_level(void*, int)"
+    extern "void cvisor_sandbox_set_allow_network(void*, int)"
     extern "void* cvisor_run(void*, const char*)"
+    extern "void* cvisor_run_timeout(void*, const char*, unsigned long long)"
     extern "void cvisor_output_free(void*)"
+    extern "int cvisor_output_exit_code(void*)"
     extern "void* cvisor_output_stdout(void*, void*)"
     extern "void* cvisor_output_stderr(void*, void*)"
     extern "void cvisor_bytes_free(void*, size_t)"
@@ -36,11 +39,12 @@ module Cvisor
 
   # Captured output of one run.
   class Output
-    attr_reader :stdout_bytes, :stderr_bytes
+    attr_reader :stdout_bytes, :stderr_bytes, :exit_code
 
-    def initialize(stdout_bytes, stderr_bytes)
+    def initialize(stdout_bytes, stderr_bytes, exit_code)
       @stdout_bytes = stdout_bytes
       @stderr_bytes = stderr_bytes
+      @exit_code = exit_code
     end
 
     def stdout = @stdout_bytes.force_encoding("UTF-8")
@@ -57,12 +61,21 @@ module Cvisor
       Native.cvisor_sandbox_set_log_level(@ptr, level == "DEBUG" ? 1 : 0)
     end
 
-    def run(command)
-      out = Native.cvisor_run(@ptr, command)
+    def set_allow_network(allow)
+      Native.cvisor_sandbox_set_allow_network(@ptr, allow ? 1 : 0)
+    end
+
+    def run(command, timeout_ms: nil)
+      out = if timeout_ms.is_a?(Integer) && timeout_ms.positive?
+              Native.cvisor_run_timeout(@ptr, command, timeout_ms)
+            else
+              Native.cvisor_run(@ptr, command)
+            end
       raise "sandbox run failed" if out.null?
       begin
         Output.new(read_output(out, :cvisor_output_stdout),
-                   read_output(out, :cvisor_output_stderr))
+                   read_output(out, :cvisor_output_stderr),
+                   Native.cvisor_output_exit_code(out))
       ensure
         Native.cvisor_output_free(out)
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cvisor
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: x86_64-linux-musl
 authors:
 - butter.dev