commit	70cf8821a4c669e263efa655fc5d5947e669d329	[log] [tgz]
author	Oliver Newman <olivernewman@google.com>	Tue Apr 18 16:54:16 2023 +0000
committer	CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com>	Tue Apr 18 16:54:16 2023 +0000
tree	37e468b5700178e543165dac68be63fd61281f70
parent	5f9d1c17718f0bd4566cba735730a5d9ecdd55f7 [diff]

[engine] Generalize "nsjail" package to "sandbox"

This provides a clearer path towards supporting sandboxing on macOS and
Windows.

Change-Id: I18e53caf0368368d9faee29cd619c0a3fa944b36
Reviewed-on: https://fuchsia-review.googlesource.com/c/shac-project/shac/+/838257
Fuchsia-Auto-Submit: Oliver Newman <olivernewman@google.com>
Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
Reviewed-by: Marc-Antoine Ruel <maruel@google.com>

internal/engine/run.go[diff]
internal/engine/run_test.go[diff]
internal/engine/runtime_ctx_os.go[diff]
internal/nsjail/nsjail.go[Deleted - diff]
internal/nsjail/nsjail_test.go[Deleted - diff]
internal/sandbox/download_nsjail.go[Renamed from internal/nsjail/download.go - diff]
internal/sandbox/nsjail-linux-amd64[Renamed from internal/nsjail/nsjail-linux-amd64 - diff]
internal/sandbox/nsjail-linux-arm64[Renamed from internal/nsjail/nsjail-linux-arm64 - diff]
internal/sandbox/nsjail_linuxamd64.go[Renamed from internal/nsjail/nsjail_linuxamd64.go - diff]
internal/sandbox/nsjail_linuxarm64.go[Renamed from internal/nsjail/nsjail_linuxarm64.go - diff]
internal/sandbox/nsjail_other.go[Renamed from internal/nsjail/nsjail_other.go - diff]
internal/sandbox/sandbox.go[Added - diff]

12 files changed

tree: 37e468b5700178e543165dac68be63fd61281f70

README.md

shac

Scalable Hermetic Analysis and Checks.

Usage

go install go.fuchsia.dev/shac-project/shac@latest
shac check
shac doc shac.star | less

Documentation

doc/stdlib.md: shac runtime standard library documentation.
doc/stdlib.star: shac runtime standard library starlark pseudo code.

Contributing

⚠ The source of truth is at https://fuchsia.googlesource.com/shac-project/shac.git and uses Gerrit for code review.

See CONTRIBUTING.md to submit changes.