sandboxbox 1.2.0 → 1.2.1

package/container.js

@@ -217,6 +217,87 @@ echo "⚠️  Note: Chromium-only (Firefox/WebKit need glibc - use Ubuntu)"
     // Resolve project directory
     const resolvedProjectDir = resolve(projectDir);
 
+    // First, try full namespace isolation
+    try {
+      console.log('🎯 Attempting full namespace isolation...');
+      return await this.runPlaywrightWithNamespaces(options);
+    } catch (error) {
+      console.log(`⚠️  Namespace isolation failed: ${error.message}`);
+      console.log('🔄 Falling back to basic isolation mode...\n');
+      return await this.runPlaywrightBasic(options);
+    }
+  }
+
+  /**
+   * Run simple container test without Playwright (for testing purposes)
+   */
+  async runSimpleTest(options = {}) {
+    const { projectDir = '.', testCommand = 'echo "Container is working!" && ls -la /workspace' } = options;
+    const resolvedProjectDir = resolve(projectDir);
+
+    console.log('🧪 Running simple container test...\n');
+
+    // Try basic isolation first
+    try {
+      console.log('🎯 Attempting basic isolation...');
+      return await this.runBasicTest(options);
+    } catch (error) {
+      console.log(`⚠️  Basic test failed: ${error.message}`);
+      console.log('🔄 Running without isolation...\n');
+      return this.runWithoutIsolation(options);
+    }
+  }
+
+  /**
+   * Run basic test in container
+   */
+  async runBasicTest(options = {}) {
+    const { projectDir = '.', testCommand = 'echo "Container is working!" && ls -la /workspace' } = options;
+    const resolvedProjectDir = resolve(projectDir);
+
+    // Simplified bubblewrap command
+    const bwrapCmd = [
+      bubblewrap.findBubblewrap(),
+      '--bind', resolvedProjectDir, '/workspace',
+      '--chdir', '/workspace',
+      '--tmpfs', '/tmp',
+      '/bin/sh', '-c', testCommand
+    ];
+
+    console.log(`🚀 Running: ${testCommand}`);
+    console.log(`📁 Project directory: ${resolvedProjectDir}`);
+    console.log(`🎯 Sandbox isolation: basic mode\n`);
+
+    return this.executeCommand(bwrapCmd, resolvedProjectDir);
+  }
+
+  /**
+   * Run without any isolation (last resort)
+   */
+  async runWithoutIsolation(options = {}) {
+    const { projectDir = '.', testCommand = 'echo "Container is working!" && ls -la' } = options;
+    const resolvedProjectDir = resolve(projectDir);
+
+    console.log(`🚀 Running without isolation: ${testCommand}`);
+    console.log(`📁 Project directory: ${resolvedProjectDir}`);
+    console.log(`🎯 Sandbox isolation: none\n`);
+
+    try {
+      execSync(testCommand, { stdio: 'inherit', cwd: resolvedProjectDir });
+      console.log('\n✅ Test completed successfully!');
+      return 0;
+    } catch (error) {
+      throw new Error(`Test failed: ${error.message}`);
+    }
+  }
+
+  /**
+   * Run Playwright with full namespace isolation (ideal mode)
+   */
+  async runPlaywrightWithNamespaces(options = {}) {
+    const { projectDir = '.', testCommand = 'npx playwright test', mountProject = true } = options;
+    const resolvedProjectDir = resolve(projectDir);
+
     // Build bubblewrap command with proper namespace isolation
     const bwrapCmd = [
       bubblewrap.findBubblewrap(),
@@ -289,6 +370,48 @@ echo "⚠️  Note: Chromium-only (Firefox/WebKit need glibc - use Ubuntu)"
     console.log(`📁 Project directory: ${resolvedProjectDir}`);
     console.log(`🎯 Sandbox isolation: full bubblewrap namespace isolation\n`);
 
+    return this.executeCommand(fullCmd, resolvedProjectDir);
+  }
+
+  /**
+   * Run Playwright with basic isolation (fallback mode for limited environments)
+   */
+  async runPlaywrightBasic(options = {}) {
+    const { projectDir = '.', testCommand = 'npx playwright test', mountProject = true } = options;
+    const resolvedProjectDir = resolve(projectDir);
+
+    console.log('🎯 Running in basic isolation mode (limited features)...');
+
+    // Simplified bubblewrap command without namespaces
+    const bwrapCmd = [
+      bubblewrap.findBubblewrap(),
+
+      // Basic filesystem
+      '--bind', resolvedProjectDir, '/workspace',
+      '--chdir', '/workspace',
+      '--tmpfs', '/tmp',
+      '--share-net',  // Keep network access
+
+      // Essential environment variables
+      '--setenv', 'PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1',
+      '--setenv', 'PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH=/usr/bin/chromium-browser',
+      '--setenv', 'CHROMIUM_FLAGS=--no-sandbox --disable-dev-shm-usage --disable-gpu',
+
+      // Run command directly without wrapper script
+      '/bin/sh', '-c', testCommand
+    ];
+
+    console.log(`🚀 Running: ${testCommand}`);
+    console.log(`📁 Project directory: ${resolvedProjectDir}`);
+    console.log(`🎯 Sandbox isolation: basic mode (limited namespaces)\n`);
+
+    return this.executeCommand(bwrapCmd, resolvedProjectDir);
+  }
+
+  /**
+   * Execute bubblewrap command with proper error handling
+   */
+  executeCommand(fullCmd, resolvedProjectDir) {
     try {
       // Execute with spawn for better control
       const child = spawn(fullCmd[0], fullCmd.slice(1), {
@@ -446,7 +569,21 @@ Requirements:
 
     } else if (args[0] === 'run') {
       const projectDir = args[1] || '.';
-      await container.runPlaywright({ projectDir });
+
+      // First try simple test to verify container works
+      console.log('🧪 Testing container functionality...\n');
+      try {
+        await container.runSimpleTest({ projectDir });
+        console.log('✅ Container test successful!\n');
+
+        // Now try Playwright
+        console.log('🎭 Running Playwright tests...\n');
+        await container.runPlaywright({ projectDir });
+      } catch (error) {
+        console.log(`⚠️  Container test failed: ${error.message}`);
+        console.log('🚫 Skipping Playwright tests due to container issues\n');
+        throw error;
+      }
 
     } else if (args[0] === 'shell') {
       const projectDir = args[1] || '.';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandboxbox",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Zero-privilege container runner with Playwright support",
   "type": "module",
   "main": "index.js",