71 lines
2.7 KiB
Python
71 lines
2.7 KiB
Python
|
import importlib.util
|
||
|
|
import json
|
||
|
|
import os
|
||
|
|
import tempfile
|
||
|
|
from pathlib import Path
|
||
|
|
from unittest.mock import patch
|
||
|
|
|
||
|
|
from sandboxer.core.manager import SandboxManager
|
||
|
|
from sandboxer.extensions.bwrap import BwrapExtension
|
||
|
|
from sandboxer.lifecycle.store import SandboxStore
|
||
|
|
from sandboxer.models import Extension, Profile, SandboxCreateRequest, SandboxExecRequest
|
||
|
|
|
||
|
|
spec = importlib.util.spec_from_file_location(
|
||
|
|
"proof", Path(__file__).with_name("smoke-bwrap-egress.py")
|
||
|
|
)
|
||
|
|
proof = importlib.util.module_from_spec(spec)
|
||
|
|
spec.loader.exec_module(proof)
|
||
|
|
os.environ["SANDBOXER_NO_STATE_HUB"] = "1"
|
||
|
|
with tempfile.TemporaryDirectory(prefix="glas-managed-egress-") as directory:
|
||
|
|
root = Path(directory)
|
||
|
|
profile = Profile(
|
||
|
|
id="profile.egress-proof",
|
||
|
|
version="1",
|
||
|
|
extension="ext.bwrap",
|
||
|
|
network={"default": "deny", "egress": ["api.anthropic.com:443"]},
|
||
|
|
)
|
||
|
|
ext = Extension(
|
||
|
|
id="ext.bwrap",
|
||
|
|
title="proof",
|
||
|
|
handler="sandboxer.extensions.bwrap:BwrapExtension",
|
||
|
|
config={"base_dir": str(root / "sandboxes"), "allowed_egress": ["api.anthropic.com:443"]},
|
||
|
|
)
|
||
|
|
consumer = {"actor": "agt", "project": "glas-harness", "run_id": "egress-proof"}
|
||
|
|
with (
|
||
|
|
patch("sandboxer.core.manager.load_profile", return_value=profile),
|
||
|
|
patch("sandboxer.core.manager.resolve_extension", return_value=ext),
|
||
|
|
patch("sandboxer.core.manager.load_extension", return_value=ext),
|
||
|
|
):
|
||
|
|
store = SandboxStore(path=root / "sandboxes.json")
|
||
|
|
mgr = SandboxManager(store=store)
|
||
|
|
created = mgr.create(
|
||
|
|
SandboxCreateRequest(profile=profile.id, consumer=consumer), host="localhost"
|
||
|
|
)
|
||
|
|
try:
|
||
|
|
# Different manager and store instances reconstruct the persisted owner handle.
|
||
|
|
resumed = SandboxManager(store=SandboxStore(path=root / "sandboxes.json"))
|
||
|
|
result = resumed.execute(
|
||
|
|
created.sandbox_id,
|
||
|
|
SandboxExecRequest(
|
||
|
|
command=["python3", "-c", proof.PROBE], consumer=consumer, timeout_seconds=40
|
||
|
|
),
|
||
|
|
)
|
||
|
|
assert result.exit_code == 0, result.stderr
|
||
|
|
finally:
|
||
|
|
SandboxManager(store=SandboxStore(path=root / "sandboxes.json")).destroy(
|
||
|
|
created.sandbox_id
|
||
|
|
)
|
||
|
|
assert not Path(created.inputs["egress_dir"]).exists()
|
||
|
|
assert not BwrapExtension._pid_alive(int(created.inputs["egress_pid"]))
|
||
|
|
print(
|
||
|
|
json.dumps(
|
||
|
|
{
|
||
|
|
"sandbox_id": created.sandbox_id,
|
||
|
|
"manager_restart": True,
|
||
|
|
"proof": json.loads(result.stdout),
|
||
|
|
"proxy_removed": True,
|
||
|
|
"model_call": False,
|
||
|
|
}
|
||
|
|
)
|
||
|
|
)
|