aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
* Merge pull request #55 from python-discord/proper-chrootGravatar Mark2020-02-05-49/+172
|\ | | | | Configure a proper chroot jail for NsJail
| * Merge branch 'master' into proper-chrootGravatar Mark2020-02-05-0/+1
| |\ | |/ |/|
* | Update CODEOWNERSGravatar Joseph2020-02-02-1/+1
| |
* | Create CODEOWNERSGravatar Joseph2020-02-02-0/+1
| |
| * Update time limit in docstringGravatar Mark2020-02-05-1/+1
| | | | | | Co-Authored-By: Sebastiaan Zeeff <[email protected]>
| * Increase time limit from 2 to 5 secondsGravatar Joseph Banks2020-01-24-2/+2
| |
| * Fix #56: stdout and stderr outputs in wrong orderGravatar MarkKoz2020-01-11-3/+19
| |
| * Add test for importing numpyGravatar MarkKoz2019-12-28-0/+6
| | | | | | | | | | This is a test for #53, which fixed numpy failing to import due to using multiple threads by default.
| * Test root and direct children are read-onlyGravatar MarkKoz2019-12-28-7/+10
| |
| * Test shared memory is disabledGravatar MarkKoz2019-12-28-0/+27
| | | | | | | | Co-authored-by: 0xf0f <[email protected]>
| * Mount /usr/lib so ctypes can use libffiGravatar MarkKoz2019-12-28-0/+7
| |
| * Mount only what's needed in the chroot jailGravatar MarkKoz2019-12-28-37/+99
| | | | | | | | | | | | | | | | | | | | | | | | devfs and sysfs were problematic since they were being mounted as tmpfs, which is r/w. For example, the Python process could write to cgroups. Now, only what is needed to run Python gets mounted. This boils down to the venv itself and some shared libraries Python needs. * Use a config file for NsJail instead of command-line options * Map 65534 (nobody) user & group inside the user namespace to 65534 outside the namespace rather than mapping to current uid/guid (which was 0 AKA root)
| * Disable shared memory in Docker containerGravatar MarkKoz2019-12-28-0/+2
|/
* Merge pull request #53 from python-discord/limit-numpy-threadsGravatar Mark2019-12-16-0/+10
|\ | | | | Limit numpy to using 1 thread
| * Limit numpy to using 1 threadGravatar MarkKoz2019-12-16-0/+10
|/
* Merge pull request #52 from python-discord/ci-testGravatar Mark2019-12-16-0/+3
|\ | | | | CI: fix incorrect CWD for check script
| * CI: fix incorrect CWD for check scriptGravatar MarkKoz2019-12-16-0/+3
|/
* Merge pull request #51 from python-discord/3-external-libsGravatar Mark2019-12-16-36/+325
|\ | | | | Add external libraries and update image
| * Pin external dependenciesGravatar Matteo Bertucci2019-12-16-16/+16
| |
| * Install beautifulsoup4 pyyaml and tomlGravatar Matteo Bertucci2019-12-16-1/+47
| |
| * Install more-itertools and networkxGravatar Matteo Bertucci2019-12-16-4/+29
| |
| * Delete toml and yamlGravatar Matteo Bertucci2019-12-15-30/+1
| |
| * Use bash instead of ashGravatar MarkKoz2019-12-14-13/+13
| | | | | | | | Forgot to do this after switching to Debian.
| * Update the Python version in READMEGravatar MarkKoz2019-12-14-2/+2
| |
| * Add gcc to base containerGravatar MarkKoz2019-12-14-0/+1
| | | | | | | | | | A C compiler is needed for some of the Python libraries to build because they don't have wheels >:(
| * Switch Docker base image to Debian BusterGravatar MarkKoz2019-12-14-17/+19
| | | | | | | | | | Unlike Alpine, Python manylinux wheels work on Debian because it's a glibc-based distro.
| * Add external librariesGravatar Matteo Bertucci2019-12-14-1/+245
|/ | | | | | Add the libraries specified in #3 : numpy scipy pandas sympy fuzzywuzzy python-dateutil pendulum arrow yarl PyYAML toml attrs forbiddenfruit
* Merge pull request #50 from python-discord/python-3.8Gravatar Mark2019-12-08-91/+71
|\ | | | | Update to Python 3.8
| * Update flake8-annotations for Python 3.8 supportGravatar MarkKoz2019-12-08-48/+21
| | | | | | | | | | The update makes typed-ast optional for 3.8 which fixes the container builds that would otherwise require gcc and Python headers.
| * Update NsJail to 2.9Gravatar MarkKoz2019-12-01-3/+5
| |
| * Update to Python 3.8Gravatar MarkKoz2019-12-01-68/+73
| | | | | | | | | | | | | | | | | | Currently, the dev image is broken due to typed-ast being present and requiring GCC and Python.h. Supposedly that package will be made optional by flake8-annotations in a later update. * Use the Python image for the base image's first stage to save downloading a separate alpine image.
| * Fix if statement for syncing dev dependencies in venv imageGravatar MarkKoz2019-12-01-1/+1
|/
* Merge pull request #49 from makusu2/fixsyncGravatar Mark2019-10-05-1/+1
|\ | | | | Use pipenv sync instead of pipenv --sync
| * Use pipenv sync instead of pipenv --syncGravatar Maku2019-10-05-1/+1
|/
* Merge pull request #45 from python-discord/add-flake8-annotationsGravatar Mark2019-09-23-10/+25
|\ | | | | Add flake8-annotations & relint
| * Fix multiline function definitionGravatar sco12019-09-23-1/+2
| | | | | | | | Co-Authored-By: Mark <[email protected]>
| * Add flake8-annotations & relintGravatar sco12019-09-23-10/+24
|/
* CI: ditch Docker v2 tasksGravatar MarkKoz2019-09-14-40/+32
|
* Merge pull request #43 from python-discord/revitalisationGravatar Leon Sandøy2019-09-14-18/+3
|\ | | | | CI: use script instead of Docker task to push images
| * CI: use script instead of Docker task to push imagesGravatar MarkKoz2019-09-14-18/+3
| |
* | Merge pull request #42 from python-discord/revitalisationGravatar Leon Sandøy2019-09-14-0/+3
|\| | | | | Fix CI Image Push
| * CI: specify container registry for Docker push tasksGravatar MarkKoz2019-09-14-0/+3
| |
* | Merge pull request #22 from python-discord/revitalisationGravatar Leon Sandøy2019-09-14-1173/+1293
|\| | | | | Revitalisation
| * Merge pull request #41 from python-discord/fix-flake8-docstringsGravatar Mark2019-09-05-36/+38
| |\ | | | | | | Fix misconfigured flake8 so docstrings are properly linted
| | * Fix misconfigured flake8 so docstrings are properly lintedGravatar S. Co12019-09-05-36/+38
| |/ | | | | Bump flake8-docstrings dependency pin to support the fix
| * Merge pull request #40 from python-discord/nsjail-clone-fixGravatar Mark2019-09-03-1/+1
| |\ | | | | | | Nsjail Clone Fix
| | * CI: fix NsJail clone in base Docker imageGravatar MarkKoz2019-09-03-1/+1
| | | | | | | | | | | | | | | | | | | | | Unspecify the depth to make the clone non-shallow again. A depth of 1 was too shallow as it only allowed the latest commit to be cloned. An arbitrary larger depth would still break eventually. The repository is small enough to not warrant a shallow clone anyway.
| * | Merge pull request #39 from python-discord/update-contribGravatar Mark2019-09-03-0/+3
| |\ \ | | |/ | |/| Update contrib doc for allowing edits from maintainers
| | * Update contrib doc for allowing edits from maintainersGravatar S. Co12019-09-03-0/+3
| |/
| * Merge pull request #33 from python-discord/ciGravatar Johannes Christ2019-08-06-145/+316
| |\ | | | | | | CI Improvements