| Commit message (Collapse) | Author | Age | Lines |
... | |
| | |
| | |
| | |
| | |
| | | |
Build if the base changed or the venv changed and the base cannot be
pulled.
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | | |
It was initially used to enable access to variables across jobs, but
the jobs will eventually be consolidated into one so output variables
will no longer be needed.
|
| | |
| | |
| | |
| | | |
Avoids type casting ambiguity and weirdness.
|
| | |
| | |
| | |
| | |
| | | |
This change allows for the venv image to be pushed since it won't be
built with dev dependencies.
|
| | | |
|
| | |
| | |
| | |
| | | |
Splitting steps into several files makes the YAML more maintainable.
|
| | |
| | |
| | |
| | | |
* Use inherit_errexit in check_dockerfiles.sh
|
| | | |
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
python-discord/bug/ci/61/python-symlink-not-resolving
Install Pipfile into system interpreter
|
|/ /
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
A virtual environment is redundant in the context of deployment. It
just increases the size and build time of the image.
* Replace venv with system interpreter
* Mount Python binaries in /usr/local/bin in NsJail
* Fix #61: Python symlink in venv not resolving
* Re-lock Pipfile because it wasn't up to date according to
pipenv install --deploy
|
|/ |
|
|\
| |
| | |
Configure a proper chroot jail for NsJail
|
| |\
| |/
|/| |
|
| | |
|
| | |
|
| |
| |
| | |
Co-Authored-By: Sebastiaan Zeeff <[email protected]>
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
This is a test for #53, which fixed numpy failing to import due to
using multiple threads by default.
|
| | |
|
| |
| |
| |
| | |
Co-authored-by: 0xf0f <[email protected]>
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
devfs and sysfs were problematic since they were being mounted as
tmpfs, which is r/w. For example, the Python process could write to
cgroups. Now, only what is needed to run Python gets mounted. This
boils down to the venv itself and some shared libraries Python needs.
* Use a config file for NsJail instead of command-line options
* Map 65534 (nobody) user & group inside the user namespace to 65534
outside the namespace rather than mapping to current uid/guid (which
was 0 AKA root)
|
|/ |
|
|\
| |
| | |
Limit numpy to using 1 thread
|
|/ |
|
|\
| |
| | |
CI: fix incorrect CWD for check script
|
|/ |
|
|\
| |
| | |
Add external libraries and update image
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
Forgot to do this after switching to Debian.
|
| | |
|
| |
| |
| |
| |
| | |
A C compiler is needed for some of the Python libraries to build
because they don't have wheels >:(
|
| |
| |
| |
| |
| | |
Unlike Alpine, Python manylinux wheels work on Debian because it's a
glibc-based distro.
|
|/
|
|
|
|
| |
Add the libraries specified in #3 :
numpy scipy pandas sympy fuzzywuzzy python-dateutil pendulum
arrow yarl PyYAML toml attrs forbiddenfruit
|
|\
| |
| | |
Update to Python 3.8
|
| |
| |
| |
| |
| | |
The update makes typed-ast optional for 3.8 which fixes the container
builds that would otherwise require gcc and Python headers.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Currently, the dev image is broken due to typed-ast being present and
requiring GCC and Python.h. Supposedly that package will be made
optional by flake8-annotations in a later update.
* Use the Python image for the base image's first stage to save
downloading a separate alpine image.
|
|/ |
|
|\
| |
| | |
Use pipenv sync instead of pipenv --sync
|
|/ |
|
|\
| |
| | |
Add flake8-annotations & relint
|
| |
| |
| |
| | |
Co-Authored-By: Mark <[email protected]>
|
|/ |
|