| Commit message (Collapse) | Author | Age | Lines |
| ... | |
| | | |
|
| | |
| |
| |
| |
| |
| |
| | |
load: true was already creating a tarball, but it was getting
immediately loaded. Since no other Docker builds run in this job,
it's useless to load it. The action can still be leveraged to create
the tarball instead of manually invoking `docker save`.
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| |/ |
|
| |\ |
|
| | |
| |
| | |
Co-authored-by: wookie184 <[email protected]>
|
| | |
| |
| |
| | |
No more mocks!
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | |
| |
| |
| |
| |
| | |
Python args are specified as a single string because if they were
positional, there wouldn't be a way to distinguish them from NsJail's
args.
|
| |/ |
|
| |\
| |
| | |
Store relative paths in coverage data
|
| |/
|
|
|
|
|
| |
Also remove the reliance on the container needing to mount the host's
files to the same directory during local testing.
Fix #135
|
| | |
|
| |\ |
|
| | |
| |
| |
| |
| |
| | |
Python 3.9 is available on the self-hosted runner and is sufficient to
run coveralls. Trying to get the setup-python action supported on
the self-hosted runner proved to be problematic.
|
| | |
| |
| |
| |
| |
| | |
The self-hosted runner has cgroupv2 enabled. It's only needed to run
the tests on a cgroupv2 system. Only lint, push the image, and deploy
it on one runner to avoid redundancy.
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Fix NsJail failing to set the swap limit because it tries to write to
a file that doesn't exist.
Log a warning if swap is on, the swap controller is disabled, and the
NsJail config is attempting to limit swap memory.
|
| | |
| |
| |
| |
| | |
Memory limit of the parent doesn't need to be modified because NsJail
is now able to set the swap limit itself.
|
| | | |
|
| | |
| |
| |
| |
| |
| | |
The NsJail config can be overridden by command-line arguments. However,
there is no way to negate `--use_cgroupv2`. Hence, manual correction
of the config by the user is required.
|
| | | |
|
| | | |
|
| | |
| |
| |
| |
| |
| | |
`test_numpy_import` fails when running with `pipenv run tests`, since
numpy was not installed. Modify the pipenv script to install numpy
before starting the tests.
|
| | |
| |
| |
| |
| | |
Dynamically calculate the position of the arguments rather than
hard-coding them.
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| | |
The updated versions adds support for telling NsJail to set the max swap
memory in the cgroup.
Resolve #125
|
| | |
| |
| |
| |
| | |
They're encoded with the system's locale, so that's what should be used
to read them.
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Ensure the cgroupv2 mount exists, subtree_control is not empty, and
swap is disabled.
Fix #126
Fix #102
|
| | | |
|
| |/ |
|
| | |
|
| |\ |
|
| | |
| |
| |
| |
| |
| |
| | |
Remove the rename step from the protobuf generation script to get around
a bug causing failures in the test suite.
Signed-off-by: Hassan Abouelela <[email protected]>
|
| |/
|
|
|
|
|
|
| |
Bumps protobuf from ~=3.14 to ==3.19. 3.19 was already a valid upgrade
from ~=3.14, but it introduced a breaking bug. The dependency has been
locked for now to avoid any more unintended bugs.
Signed-off-by: Hassan Abouelela <[email protected]>
|
| |\ |
|
| |/ |
|
| |\
| |
| | |
Add the --use_cgroupv2 flag when relevant
|
| | | |
|
| |/
|
|
| |
According to https://github.com/google/nsjail/pull/119, the flag should be passed for NsJail to try to use cgroupv2. This commit will use the /sys/fs/cgroup structure to guess the installed version, and depending on the version add that flag.
|
| |\ |
|
| |/ |
|
| | |
|
| |\ |
|
| | |
| |
| |
| | |
Signed-off-by: Hassan Abouelela <[email protected]>
|