Add bounded aircraft control and verify current packaged runtime closure

2026-09-19 13:31:51 +02:00
parent 4125018d04
commit a880e0485c
695 changed files with 79317 additions and 44 deletions
@@ -0,0 +1,65 @@
+{
+  "command": [
+    "bwrap",
+    "--unshare-net",
+    "--unshare-pid",
+    "--unshare-ipc",
+    "--unshare-uts",
+    "--die-with-parent",
+    "--cap-drop",
+    "ALL",
+    "--clearenv",
+    "--ro-bind",
+    "/",
+    "/",
+    "--tmpfs",
+    "/home",
+    "--tmpfs",
+    "/tmp",
+    "--tmpfs",
+    "/run",
+    "--proc",
+    "/proc",
+    "--dev",
+    "/dev",
+    "--ro-bind",
+    "/tmp/erri-dedicated-runtime/server",
+    "/tmp/runtime",
+    "--bind",
+    "/tmp/erri-dedicated-chat-20260919-1314/source",
+    "/tmp/source",
+    "--bind",
+    "/tmp/erri-dedicated-chat-20260919-1314",
+    "/tmp/work",
+    "--setenv",
+    "HOME",
+    "/tmp/work/home",
+    "--setenv",
+    "TMPDIR",
+    "/tmp/work/tmp",
+    "--setenv",
+    "XDG_CONFIG_HOME",
+    "/tmp/work/home/.config",
+    "--setenv",
+    "XDG_DATA_HOME",
+    "/tmp/work/home/.local/share",
+    "--setenv",
+    "XDG_CACHE_HOME",
+    "/tmp/work/home/.cache",
+    "--setenv",
+    "PATH",
+    "/usr/bin:/bin",
+    "--setenv",
+    "LANG",
+    "C.UTF-8",
+    "--chdir",
+    "/tmp/runtime",
+    "/usr/bin/python3",
+    "-c",
+    "import json,os,socket,sys\nstate={\"netns\":os.readlink(\"/proc/self/ns/net\"),\"interfaces\":socket.if_nameindex(),\"routes\":open(\"/proc/net/route\").read(),\"ipv6Routes\":open(\"/proc/net/ipv6_route\").read()}\nprint(\"ERR ISOLATION \"+json.dumps(state),flush=True)\nassert state[\"netns\"] != sys.argv[1], \"network namespace was not isolated\"\nassert [name for _,name in state[\"interfaces\"]] == [\"lo\"], \"non-loopback interface present\"\nassert len(state[\"routes\"].splitlines()) == 1, \"IPv4 route present\"\nassert all(line.split()[-1] == \"lo\" for line in state[\"ipv6Routes\"].splitlines()), \"non-loopback IPv6 route present\"\nif len(sys.argv)>2: os.execv(sys.argv[2],sys.argv[2:])\n",
+    "net:[4026531833]"
+  ],
+  "exit": 0,
+  "stdout": "ERR ISOLATION {\"netns\": \"net:[4026534801]\", \"interfaces\": [[1, \"lo\"]], \"routes\": \"Iface\\tDestination\\tGateway \\tFlags\\tRefCnt\\tUse\\tMetric\\tMask\\t\\tMTU\\tWindow\\tIRTT                                                       \\n\", \"ipv6Routes\": \"00000000000000000000000000000000 00 00000000000000000000000000000000 00 00000000000000000000000000000000 ffffffff 00000001 00000000 00200200       lo\\n00000000000000000000000000000001 80 00000000000000000000000000000000 00 00000000000000000000000000000000 00000000 00000002 00000000 80200001       lo\\n00000000000000000000000000000000 00 00000000000000000000000000000000 00 00000000000000000000000000000000 ffffffff 00000001 00000000 00200200       lo\\n\"}\n",
+  "stderr": ""
+}