You've already forked code_examples_server
mirror of
https://github.com/AdaCore/code_examples_server.git
synced 2026-02-12 12:45:18 -08:00
f82659d3cf
Part of the transition to running everything in the container. Start a documentation section.
69 lines
2.0 KiB
Python
69 lines
2.0 KiB
Python
""" This is a standalone Python script that runs its argument
|
|
safely in a container.
|
|
|
|
At the moment it assumes that the container "safecontainer"
|
|
exists and is running.
|
|
"""
|
|
|
|
import os
|
|
import time
|
|
import sys
|
|
import subprocess
|
|
|
|
CONT = 'safecontainer'
|
|
INTERRUPT_STRING = '<interrupted>'
|
|
DEBUG = False
|
|
|
|
|
|
def run(command):
|
|
if DEBUG:
|
|
print ">", " ".join(command)
|
|
output = subprocess.check_output(["lxc", "exec", CONT, "--"] + command)
|
|
if output:
|
|
output = output.rstrip()
|
|
if DEBUG:
|
|
print "<", output
|
|
return output
|
|
|
|
|
|
def safe_run(main, mode):
|
|
# Make a temporary directory on the container
|
|
tmpdir = run(["mktemp", "-d"])
|
|
|
|
try:
|
|
run(["chown", "unprivileged", tmpdir])
|
|
|
|
# Push the executable to the container
|
|
subprocess.check_call(["lxc", "file", "push", main,
|
|
# This requires the dir to end with /
|
|
CONT + tmpdir + os.sep])
|
|
|
|
# Run it, printint output to stdout as we go along
|
|
subprocess.call(["lxc", "exec", CONT, "--",
|
|
"su", "unprivileged", "-c",
|
|
('timeout 10s bash -c "LD_PRELOAD=/preloader.so {}" '
|
|
'|| echo "{}"').format(
|
|
os.path.join(tmpdir, os.path.basename(main)),
|
|
INTERRUPT_STRING)],
|
|
stdout=sys.stdout)
|
|
except Exception:
|
|
print sys.exc_info()
|
|
|
|
finally:
|
|
if tmpdir and tmpdir.startswith("/tmp"):
|
|
time.sleep(0.2) # Time for the filesystem to sync
|
|
run(["rm", "-rf", tmpdir])
|
|
|
|
|
|
if __name__ == '__main__':
|
|
# Do not perform any sanity checking on args - this is not meant to
|
|
# be launched interactively
|
|
main = sys.argv[1]
|
|
mode = sys.argv[2]
|
|
|
|
# lxc commands require a HOME - but this might not be set by nginx:
|
|
# do this here in this case
|
|
if "HOME" not in os.environ:
|
|
os.environ["HOME"] = "/home/compile_server"
|
|
safe_run(main, mode)
|