mengzhx/deepseek-harness
1
0
Fork 0
mirror of https://github.com/deepseek-ai/deepseek-harness.git synced 2026-08-29 04:26:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(sandbox): isolate bwrap PID namespace

Browse Source
This commit is contained in:
kingwl
2026-08-20 10:05:16 +08:00
committed by Hypatia May
parent 141eb6fef8
commit 82db1515fb
22 changed files with 149 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/prepare-ci-bubblewrap.sh
+1 -1
View File
@@ -28,5 +28,5 @@ printf '%s\n' "$root/usr/bin" >> "$GITHUB_PATH"
sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 \
|| echo 'apparmor userns knob absent — the functional probe decides'
"$root/usr/bin/bwrap" --version
"$root/usr/bin/bwrap" --ro-bind / / --dev /dev --proc /proc --die-with-parent -- true
"$root/usr/bin/bwrap" --ro-bind / / --dev /dev --unshare-pid --proc /proc --die-with-parent -- true
echo 'bubblewrap functional probe passed'