Commit Graph

57 Commits

Author SHA1 Message Date
Radon Rosborough 31b0185505 More work on pull and list subcmds 2022-10-10 21:51:25 -07:00
Radon Rosborough a703944915 Add ability to pull Docker images via setuid bin 2022-10-10 16:38:05 -07:00
Radon Rosborough 51cda5866b Deny access to network due to abuse reports 2022-07-01 22:06:52 -07:00
Radon Rosborough 0d92a77922 [#129] Tune cgroup resources
Should help by giving 3GB headroom instead of 1GB for the server and
operating system. Empirically, it looks like the OOM killer is
operating properly and killing user code rather than system processes,
but the small amount of headroom could have been a problem.

Extensive usage of swap could also have been a problem so I disabled
swap for user code. Reduced the CPU quota to eliminate access to
bursting from user code, as well, and bumped the pid quota because we
had a lot of headroom there.
2021-10-24 12:37:15 -07:00
Radon Rosborough 2a65f7772d [#97] Tear down exec commands properly 2021-08-20 21:02:57 -07:00
Radon Rosborough 570060ae9c Handle stdout and stderr separately 2021-08-15 14:46:34 -07:00
Radon Rosborough bfd4d4d052 Fix container teardown failing 2021-08-15 12:02:32 -07:00
Radon Rosborough c7e3e56bd2 Fix a few silly errors 2021-08-14 21:44:09 -07:00
Radon Rosborough f19e850e0d Effective teardown, and Sentry integration 2021-08-14 21:37:31 -07:00
Radon Rosborough 423f3eb8ec Gosh darn it this wasted a lot of time 2021-08-14 20:04:20 -07:00
Radon Rosborough c6a22e2793 It LIVES!!! 2021-08-14 16:56:20 -07:00
Radon Rosborough adab34e63a Getting frontend and backend to play nice 2021-08-14 14:14:02 -07:00
Radon Rosborough 2a591072fe Exit status more cleanly 2021-08-14 13:48:42 -07:00
Radon Rosborough db7b34cd4c Fix horrifying bug 2021-08-14 13:43:55 -07:00
Radon Rosborough ca48e7f64f Error handling 2021-08-13 19:58:57 -07:00
Radon Rosborough f8faba0c8f Report exit status from sentinel via FIFO 2021-08-13 19:17:44 -07:00
Radon Rosborough 50ade82e81 Get sandbox mostly working 2021-08-13 18:08:54 -07:00
Radon Rosborough cf7e5c470b Fix malloc error 2021-08-12 20:34:15 -07:00
Radon Rosborough b6b98c9919 Fix some bugs 2021-08-12 20:29:47 -07:00
Radon Rosborough 78f47ffe37 Don't tear down everything 2021-08-12 20:10:29 -07:00
Radon Rosborough c71cee1323 Oops 2021-08-12 20:01:28 -07:00
Radon Rosborough b3d4f7cf9c Add -f flag to riju-pty 2021-08-12 19:58:16 -07:00
Radon Rosborough ac79035580 Progress on sandbox, drop node-pty dependency 2021-08-12 19:38:39 -07:00
Radon Rosborough 15e5f5cff8 Debug some horrifying permission errors 2021-08-12 19:15:27 -07:00
Radon Rosborough a9c61d2de4 Looks like we didn't actually want this 2021-08-12 18:14:49 -07:00
Radon Rosborough 02851bbeec Bash can start without warnings 2021-08-12 18:14:08 -07:00
Radon Rosborough 62d67160d7 Fix a number of things 2021-08-12 17:48:59 -07:00
Radon Rosborough e34ef70358 Handle ctrl-C correctly in riju-pty 2021-08-10 07:28:10 -07:00
Radon Rosborough 1b654a4162 This line was not needed 2021-08-09 21:55:12 -07:00
Radon Rosborough 09ce44e605 Omg, it works! 2021-08-09 21:47:29 -07:00
Radon Rosborough 32c08bc641 Initial version of riju-pty wrapper 2021-08-09 21:31:31 -07:00
Radon Rosborough b6cf05e16c Disable stdout buffering 2021-08-09 20:55:57 -07:00
Radon Rosborough 389d8d0ad6 Proof of concept for pid1 sentinel executor 2021-08-09 20:55:57 -07:00
Radon Rosborough f5b7536235 Many things fixed 2021-08-01 12:42:01 -07:00
Radon Rosborough 0bec96b88b Add code formatters for Riju itself 2021-07-17 00:50:42 -07:00
Radon Rosborough 2b9da7af4b Let's gooooo 2021-07-12 06:09:45 +00:00
Radon Rosborough 256d5d1f2b Many things 2021-07-12 04:22:42 +00:00
Radon Rosborough c02c4e07da I think this is needed also 2021-07-11 21:45:31 +00:00
Radon Rosborough 320b17777c Some embarrassing mistakes 2021-07-11 21:43:58 +00:00
Radon Rosborough 701dc6b7ab Resource constraints 2021-07-11 07:28:41 +00:00
Radon Rosborough 8e22da08af More forgiving 2021-07-11 07:08:01 +00:00
Radon Rosborough 44de19946e Miscellaneous fixes 2021-07-10 22:24:42 +00:00
Radon Rosborough 76d0770038 Fix containers not being shut down 2021-07-10 21:51:36 +00:00
Radon Rosborough c85ed6d586 Support RIJU_DEPLOY_CONFIG 2021-07-05 14:42:37 +00:00
Radon Rosborough 719b16f3c0 Infrastructure go brrr 2021-07-04 17:13:59 +00:00
Radon Rosborough fcf5432058 debug 2021-06-19 08:09:22 +00:00
Radon Rosborough 9256f228e6 Oh god, well this was terrible 2021-06-19 08:06:05 +00:00
Radon Rosborough ddb2fa0d4b Hallelujah 2021-06-18 07:06:32 +00:00
Radon Rosborough ec0b90dc9b Snazzier shell prompt 2021-06-18 07:06:32 +00:00
Radon Rosborough db41dfa0a3 Container process should have a pty 2021-04-24 09:25:55 -07:00