Verify bwrap execution across owner API requests

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
This commit is contained in:
tegwick 2026-09-04 22:25:05 +02:00
parent d79e3fe358
commit fd9297810c
6 changed files with 125 additions and 2 deletions

View file

@ -47,6 +47,7 @@ def test_bwrap_argv_unshares_net_and_binds_workspace(tmp_path) -> None:
argv = ext._bwrap_argv(str(tmp_path))
assert "--unshare-net" in argv
assert "--unshare-user" in argv
assert "--die-with-parent" not in argv
assert str(tmp_path) in argv
assert "/run/sandboxer/bwrap_runner.py" in argv
assert argv[-4:] == [