diff --git a/backend/server/dockerfile b/backend/server/dockerfile index 08b22ea..31f5512 100644 --- a/backend/server/dockerfile +++ b/backend/server/dockerfile @@ -21,8 +21,10 @@ RUN mkdir projects && chown -R sboxuser:sboxuser projects # todo user namespace mapping RUN apt-get install -y firejail +# RUN echo "noblacklist /code/projects\nprivate-bin node\nwhitelist /code/projects\n" > /etc/firejail/sboxuser.profile -RUN echo '#!/bin/bash\nexec firejail --private=/projects --noprofile node dist/index.js' > /start.sh +# RUN echo '#!/bin/bash\nexec firejail --private=/projects --noprofile node dist/index.js' > /start.sh +RUN echo '#!/bin/bash\nexec firejail --private=/code/projects --noprofile --net=none --whitelist=/code/projects node dist/index.js' > /start.sh RUN chmod +x /start.sh USER sboxuser diff --git a/backend/server/src/index.ts b/backend/server/src/index.ts index b7ecd43..a1c98b8 100644 --- a/backend/server/src/index.ts +++ b/backend/server/src/index.ts @@ -116,9 +116,9 @@ io.on("connection", async (socket) => { } } - console.log("describing service:"); - const describeService = await testDescribe(); - console.log(describeService); + // console.log("describing service:"); + // const describeService = await testDescribe(); + // console.log(describeService); const sandboxFiles = await getSandboxFiles(data.sandboxId); sandboxFiles.fileData.forEach((file) => {