zozo123 commented on PR #73961: URL: https://github.com/apache/airflow/pull/73961#issuecomment-5993053807
Ran the OpenShell boundary checks on a Boat machine. Docker Desktop on macOS cannot. Its kernel is built without Landlock, and the supervisor exits before a sandbox is ready. Boat sandbox `bx_ds68s5g5` was Ubuntu 24.04.4, kernel `6.8.0-117-generic`, `CONFIG_SECURITY_LANDLOCK=y`, Landlock ABI 4, Docker 29.7.0. OpenShell gateway 0.1.2 listened on `127.0.0.1:17670` with the docker driver. The provider came from `245911dc6e`. The eight steps in `example_sandbox_toolset_openshell.py` ran through `OpenShellSandboxBackend` and `SandboxToolset`. Write, `6 * 7` returning 42, read, exit code 3, directory listing, a 3s timeout that left no `sleep 300`, and egress to `1.1.1.1:443` denied. The agent returned `sandbox boundary e2e passed` in about 13 seconds. The Boat machine was deleted after the run. Drafted-by: Cursor agent -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
