@decocms/sandbox-controller 0.11.1 → 0.12.0

package/dist/index.d.ts

@@ -3716,6 +3716,8 @@ interface DaemonAddress {
  */
 
 interface FreestyleSandboxProviderOptions {
+    /** Allow nested user namespaces inside the VM's sandbox container. Default off. */
+    allowUserNamespaces?: boolean;
     apiKey: string;
     /** The sandbox image. Default: the release built from this package's version. */
     image?: string;
@@ -3748,6 +3750,7 @@ declare class FreestyleSandboxProvider implements SandboxProvider {
     private readonly lookupClient;
     private readonly image;
     private readonly sidecarImage;
+    private readonly allowUserNamespaces;
     private readonly idleTimeoutSeconds;
     private readonly idlePauseMs;
     private readonly autoDeleteSeconds;

package/dist/index.js

@@ -6760,7 +6760,7 @@ var Freestyle = class {
 // ../sandbox/package.json
 var package_default = {
   name: "@decocms/sandbox",
-  version: "1.92.1",
+  version: "1.93.0",
   private: true,
   type: "module",
   description: "Sandbox runtime for isolated Studio tool execution",
@@ -6878,6 +6878,7 @@ var FreestyleSandboxProvider = class {
   lookupClient;
   image;
   sidecarImage;
+  allowUserNamespaces;
   idleTimeoutSeconds;
   idlePauseMs;
   autoDeleteSeconds;
@@ -6915,6 +6916,7 @@ var FreestyleSandboxProvider = class {
     });
     this.image = opts.image ?? `ghcr.io/decocms/studio/studio-sandbox-go:${package_default.version}`;
     this.sidecarImage = opts.orgFsSidecarImage ?? DEFAULT_SIDECAR_IMAGE;
+    this.allowUserNamespaces = opts.allowUserNamespaces ?? false;
     this.idleTimeoutSeconds = opts.idleTimeoutSeconds ?? 5 * 60;
     this.idlePauseMs = opts.idlePauseMs ?? 10 * 6e4;
     this.autoDeleteSeconds = opts.autoDeleteSeconds ?? 24 * 60 * 60;
@@ -6979,9 +6981,10 @@ var FreestyleSandboxProvider = class {
   }
   baseSnapshot() {
     const { image, sidecarImage } = this;
+    const namespaceMode = this.allowUserNamespaces ? "\nuser-namespaces" : "";
     const slug = `studio-sandbox-${createHash3("sha256").update(`${image}
 ${sidecarImage}
-running`).digest("hex").slice(0, 16)}`;
+running${namespaceMode}`).digest("hex").slice(0, 16)}`;
     if (this.knownSnapshots.has(slug)) return Promise.resolve(slug);
     return this.snapshotInflight.run(slug, async () => {
       if (await this.snapshotExists(slug)) {
@@ -7044,7 +7047,8 @@ running`).digest("hex").slice(0, 16)}`;
     );
     await this.run(
       vm,
-      `docker run -d --name ${CONTAINER} --restart=always -p ${DAEMON_PORT}:${DAEMON_PORT} -v ${HOST_ORG_DIR}:${WORKDIR}/org:rslave -v ${HOST_CTL_DIR}:${CTL_DIR} ${envFlags} ${shellQuote(this.image)}`,
+      // Codex's read-only sandbox uses bubblewrap inside this per-user VM.
+      `docker run -d --name ${CONTAINER} --restart=always${this.allowUserNamespaces ? " --security-opt seccomp=unconfined --security-opt apparmor=unconfined" : ""} -p ${DAEMON_PORT}:${DAEMON_PORT} -v ${HOST_ORG_DIR}:${WORKDIR}/org:rslave -v ${HOST_CTL_DIR}:${CTL_DIR} ${envFlags} ${shellQuote(this.image)}`,
       { env, timeoutMs: IMAGE_PULL_TIMEOUT_MS }
     );
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/sandbox-controller",
-  "version": "0.11.1",
+  "version": "0.12.0",
   "description": "Runs Studio agent sandboxes on Kubernetes, and serves them to a remote Studio.",
   "repository": {
     "type": "git",