script_core 0.2.1 → 0.2.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e770a999b519634cfe5ecd331b5ddd958811c157251fc6e95a5d718538b028c9
-  data.tar.gz: 96eb38e6201fda8f123a7f10662cec2988b5e298ae84d5f9b9efc003a6ed2f5f
+  metadata.gz: f0f7d0aed06a2aa8a5636be6e7113b9e4b651037d9489246ba995df1c375a190
+  data.tar.gz: 8725fa84598ca2370d7b79c747e1f29c41258d8c3f026137191a46d470f8c882
 SHA512:
-  metadata.gz: a436db0e05b904d79d8608f6036374ef504fca1ba03790108714cedbfa45655a6390af78feb1f347ecd3ba280d45c1781b9d8462d3ba9100817b2e83448e6d4e
-  data.tar.gz: 1fc656151ab00e1f4642f156cbc31e6b03c33e36a777732b69845755d26e69861cbb4f71ef2d43cc82ee4ad70c9bcf3851da771f54593d6d06cd5a974a6e9c70
+  metadata.gz: 39c01ca8ed18bf12a6c56c6d4b354d756212bb67ab33ad67855080eed4f2383cb07517e0ea42f1dde024b42be65dd86f19788356f2e0eda585010cc4afdbe8ba
+  data.tar.gz: 59c59baa3b3d6820c65df45b687d23bf0b4831b1f34539c6d0b70dd401fb60c3c686a3c2f9761417e05084e7f023e1e15a2b7eb6652680164ab74eca1740b8dc

data/.gitignore

@@ -1,4 +1,6 @@
+.generators
 .idea
+.rakeTasks
 .vagrant
 .bundle
 *.gem

data/.rubocop.yml

@@ -4,6 +4,7 @@ require:
 
 AllCops:
   TargetRubyVersion: 2.5
+  DisabledByDefault: true
   Exclude:
     - bin/**/*
     - tests/**/*
@@ -15,35 +16,8 @@ AllCops:
     - spec/dummy/db/schema.rb
     - spec/dummy/bin/**/*
 
-Rails:
-  Enabled: true
-
-Metrics/LineLength:
-  Max: 150
-
-Metrics/MethodLength:
-  Max: 100
-
-Metrics/BlockLength:
-  Max: 50
-
-Metrics/ClassLength:
-  Enabled: false
-
-Style/GuardClause:
-  Enabled: false
-
-Style/Documentation:
-  Enabled: false
-
-Style/ClassAndModuleChildren:
-  Enabled: false
-
-Naming/AccessorMethodName:
-  Enabled: false
-
-Naming/MemoizedInstanceVariableName:
-  Enabled: false
+#Metrics/AbcSize:
+#  Max: 30
 
 # Prefer assert_not over assert !
 Rails/AssertNot:
@@ -55,20 +29,23 @@ Rails/RefuteMethods:
   Include:
     - 'test/**/*'
 
-# Prefer &&/|| over and/or.
-Style/AndOr:
+Rails/IndexBy:
+  Enabled: true
+
+Rails/IndexWith:
   Enabled: true
 
-# Do not use braces for hash literals when they are the last argument of a
-# method call.
-Style/BracesAroundHashParameters:
+# Prefer &&/|| over and/or.
+Style/AndOr:
   Enabled: true
-  EnforcedStyle: context_dependent
 
 # Align `when` with `case`.
 Layout/CaseIndentation:
   Enabled: true
 
+Layout/ClosingHeredocIndentation:
+  Enabled: true
+
 # Align comments with method definitions.
 Layout/CommentIndentation:
   Enabled: true
@@ -86,6 +63,9 @@ Layout/EndAlignment:
 Layout/EmptyLineAfterMagicComment:
   Enabled: true
 
+Layout/EmptyLinesAroundAccessModifier:
+  Enabled: true
+
 Layout/EmptyLinesAroundBlockBody:
   Enabled: true
 
@@ -101,13 +81,13 @@ Layout/EmptyLinesAroundMethodBody:
 Layout/EmptyLinesAroundModuleBody:
   Enabled: true
 
-Layout/FirstArgumentIndentation:
-  Enabled: true
-
 # Use Ruby >= 1.9 syntax for hashes. Prefer { a: :b } over { :a => :b }.
 Style/HashSyntax:
   Enabled: true
 
+Layout/FirstArgumentIndentation:
+  Enabled: true
+
 # Method definitions after `private` or `protected` isolated calls need one
 # extra level of indentation.
 Layout/IndentationConsistency:
@@ -136,10 +116,10 @@ Layout/SpaceAroundEqualsInParameterDefault:
 Layout/SpaceAroundKeyword:
   Enabled: true
 
-Layout/SpaceAroundOperators:
+Layout/SpaceBeforeComma:
   Enabled: true
 
-Layout/SpaceBeforeComma:
+Layout/SpaceBeforeComment:
   Enabled: true
 
 Layout/SpaceBeforeFirstArg:
@@ -181,10 +161,10 @@ Style/StringLiterals:
   EnforcedStyle: double_quotes
 
 # Detect hard tabs, no hard tabs.
-Layout/Tab:
+Layout/IndentationStyle:
   Enabled: true
 
-# Blank lines should not have any spaces.
+# Empty lines should not have any spaces.
 Layout/TrailingEmptyLines:
   Enabled: true
 
@@ -224,9 +204,18 @@ Lint/UselessAssignment:
 Lint/DeprecatedClassMethods:
   Enabled: true
 
+Lint/DeprecatedOpenSSLConstant:
+  Enabled: true
+
 Style/ParenthesesAroundCondition:
   Enabled: true
 
+Style/HashTransformKeys:
+  Enabled: true
+
+Style/HashTransformValues:
+  Enabled: true
+
 Style/RedundantBegin:
   Enabled: true
 
@@ -245,6 +234,12 @@ Style/ColonMethodCall:
 Style/TrivialAccessors:
   Enabled: true
 
+Style/SlicingWithRange:
+  Enabled: true
+
+Style/RedundantRegexpEscape:
+  Enabled: true
+
 Performance/FlatMap:
   Enabled: true
 
@@ -265,3 +260,9 @@ Performance/ReverseEach:
 
 Performance/UnfreezeString:
   Enabled: true
+
+Performance/DeletePrefix:
+  Enabled: true
+
+Performance/DeleteSuffix:
+  Enabled: true

data/.ruby-version

@@ -1 +1 @@
-2.6.5
+2.7.1

data/.travis.yml

@@ -1,6 +1,7 @@
 language: ruby
 
 rvm:
-  - 2.6.2
+  - 2.5.8
+  - 2.7.1
 
 script: bundle exec rake compile

data/Gemfile

@@ -6,22 +6,20 @@ git_source(:github) { |repo| "https://github.com/#{repo}.git" }
 gemspec
 
 # Dummy app
-gem "rails", "~> 6.0.0"
+gem "rails", "~> 6.0"
 gem "sqlite3"
 
 # Use Puma as the app server
 gem "puma"
-# For better console experience
-gem "pry-rails"
 
 gem "listen", ">= 3.0.5", "< 3.2"
 # Access an IRB console on exception pages or by using <%= console %> anywhere in the code.
 gem "web-console", group: :development
 # Call "byebug" anywhere in the code to stop execution and get a debugger console
-gem "pry-byebug"
+gem "byebug", group: %i[development test]
 
 # To support ES6
-gem "sprockets", "~> 4.0.0.beta4"
+gem "sprockets", "~> 4.0.0"
 # Support ES6
 gem "babel-transpiler"
 # Use SCSS for stylesheets
@@ -34,7 +32,7 @@ gem "form_core"
 
 gem "acts_as_list"
 gem "timeliness-i18n"
-gem "validates_timeliness", "~> 5.0.0.alpha1"
+gem "validates_timeliness", "~> 5.0.0.beta1"
 
 gem "bulma-rails"
 gem "jquery-rails"

data/README.md

@@ -13,16 +13,28 @@ I want to make these changes:
 
 - Toolchain
     - [x] Expose mruby build config to allow developer modify mruby-engine executable, e.g: add some gems
-    - [x] Expose `mrbc` to allow developer precompile mruby library that would inject to sandboxie
-    - [ ] Watching and auto compiling mruby library when it change
+    - [x] Expose `mrbc` to allow developer precompile mruby library that would inject to sandbox
     - [x] Rake tasks for compiling mruby-engine & mruby library
+    - [ ] Watching and auto compiling mruby library when it change
     - [ ] Capistrano recipe
 - Practice
     - [x] Rails generator for mruby library
     - [x] Find a good place for engines
     - [ ] Find a good way to working with timezone on mruby side
     - [ ] Find a good way to working with `BigDecimal` & `Date` (mruby doesn't have these) on mruby side
-    - [ ] Consider about IO operations
+
+## limitation
+
+- We enable `MRB_DISABLE_STDIO` flag when compiling mruby,
+  which means the sandbox will not support gems which dependent `mruby-io` or `stdio.h`,
+  the result is you can not do any HTTP request, read and write files in the sandbox,
+  you may consider preparing data on Ruby side and pass them to the sandbox.
+
+## Help wanted
+
+I'm not familiar with C/CPP, so I can't improve ESS (in `ext/enterprise_script_service`),
+
+Currently there're too much warnings on compiling, hope some one could help to resolve them.
 
 ## Demo
 

data/Rakefile

@@ -1,19 +1,10 @@
 # frozen_string_literal: true
 
-begin
-  require "bundler/setup"
-rescue LoadError
-  puts "You must `gem install bundler` and `bundle install` to run rake tasks"
-end
-
+require "bundler/setup"
 require "bundler/gem_tasks"
 require "rake/extensiontask"
-
-begin
-  require "rspec/core/rake_task"
-  RSpec::Core::RakeTask.new(:spec)
-rescue LoadError
-end
+require "rspec/core/rake_task"
+RSpec::Core::RakeTask.new(:spec)
 
 APP_RAKEFILE = File.expand_path("spec/dummy/Rakefile", __dir__)
 load "rails/tasks/engine.rake"

data/bin/bundle

@@ -0,0 +1,114 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+#
+# This file was generated by Bundler.
+#
+# The application 'bundle' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require "rubygems"
+
+m = Module.new do
+  module_function
+
+  def invoked_as_script?
+    File.expand_path($0) == File.expand_path(__FILE__)
+  end
+
+  def env_var_version
+    ENV["BUNDLER_VERSION"]
+  end
+
+  def cli_arg_version
+    return unless invoked_as_script? # don't want to hijack other binstubs
+    return unless "update".start_with?(ARGV.first || " ") # must be running `bundle update`
+    bundler_version = nil
+    update_index = nil
+    ARGV.each_with_index do |a, i|
+      if update_index && update_index.succ == i && a =~ Gem::Version::ANCHORED_VERSION_PATTERN
+        bundler_version = a
+      end
+      next unless a =~ /\A--bundler(?:[= ](#{Gem::Version::VERSION_PATTERN}))?\z/
+      bundler_version = $1
+      update_index = i
+    end
+    bundler_version
+  end
+
+  def gemfile
+    gemfile = ENV["BUNDLE_GEMFILE"]
+    return gemfile if gemfile && !gemfile.empty?
+
+    File.expand_path("../../Gemfile", __FILE__)
+  end
+
+  def lockfile
+    lockfile =
+      case File.basename(gemfile)
+      when "gems.rb" then gemfile.sub(/\.rb$/, gemfile)
+      else "#{gemfile}.lock"
+      end
+    File.expand_path(lockfile)
+  end
+
+  def lockfile_version
+    return unless File.file?(lockfile)
+    lockfile_contents = File.read(lockfile)
+    return unless lockfile_contents =~ /\n\nBUNDLED WITH\n\s{2,}(#{Gem::Version::VERSION_PATTERN})\n/
+    Regexp.last_match(1)
+  end
+
+  def bundler_version
+    @bundler_version ||=
+      env_var_version || cli_arg_version ||
+        lockfile_version
+  end
+
+  def bundler_requirement
+    return "#{Gem::Requirement.default}.a" unless bundler_version
+
+    bundler_gem_version = Gem::Version.new(bundler_version)
+
+    requirement = bundler_gem_version.approximate_recommendation
+
+    return requirement unless Gem::Version.new(Gem::VERSION) < Gem::Version.new("2.7.0")
+
+    requirement += ".a" if bundler_gem_version.prerelease?
+
+    requirement
+  end
+
+  def load_bundler!
+    ENV["BUNDLE_GEMFILE"] ||= gemfile
+
+    activate_bundler
+  end
+
+  def activate_bundler
+    gem_error = activation_error_handling do
+      gem "bundler", bundler_requirement
+    end
+    return if gem_error.nil?
+    require_error = activation_error_handling do
+      require "bundler/version"
+    end
+    return if require_error.nil? && Gem::Requirement.new(bundler_requirement).satisfied_by?(Gem::Version.new(Bundler::VERSION))
+    warn "Activating bundler (#{bundler_requirement}) failed:\n#{gem_error.message}\n\nTo install the version of bundler this project requires, run `gem install bundler -v '#{bundler_requirement}'`"
+    exit 42
+  end
+
+  def activation_error_handling
+    yield
+    nil
+  rescue StandardError, LoadError => e
+    e
+  end
+end
+
+m.load_bundler!
+
+if m.invoked_as_script?
+  load Gem.bin_path("bundler", "bundle")
+end

data/bin/console

@@ -6,7 +6,7 @@ ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../../Gemfile",
 
 require "rubygems"
 require "bundler/setup"
-require "pry"
 require "script_core"
+require "irb"
 
-Pry.start
+IRB.start

data/bootstrap.sh

@@ -3,8 +3,8 @@
 apt-get update
 apt-get install -y build-essential zlib1g-dev libssl-dev libreadline6-dev libyaml-dev wget libffi-dev gcc g++ make bison libtool autoconf git
 cd `mktemp -d`
-curl -L "https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.3.tar.gz" | tar -xzf-
-cd ruby-2.6.2
+curl -L "https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.1.tar.gz" | tar -xzf-
+cd ruby-2.7.1
 ./configure --prefix=/usr/local
 make
 make install

data/ext/enterprise_script_service/libseccomp/.travis.yml

@@ -1,9 +1,9 @@
 # Travis CI configuration for libseccomp
 
-# https://docs.travis-ci.com/user/trusty-ci-environment
+# https://docs.travis-ci.com/user/reference/bionic
 # https://wiki.ubuntu.com/Releases
 
-dist: xenial
+dist: bionic
 sudo: false
 
 notifications:
@@ -16,8 +16,6 @@ compiler:
   - gcc
 
 language: python
-python:
-  - "nightly"
 
 addons:
   coverity_scan:
@@ -59,7 +57,7 @@ script:
   - ./configure --enable-python
   - make check-build
   - LIBSECCOMP_TSTCFG_STRESSCNT=5 make check
-  - LIBSECCOMP_TSTCFG_TYPE=live make -C tests check
+  - LIBSECCOMP_TSTCFG_TYPE=live LIBSECCOMP_TSTCFG_MODE_LIST=c make -C tests check
   # ubuntu 14.04 (trusty) clang has problems with the cython generated code
   - make clean && ./configure && scan-build --status-bugs make