Files
Jing Chen 5867605e80 Make the bwrap alias a wrapper around the sandboxexec Go bindings.
bwrap previously built its own specs.Spec, wrote an OCI bundle and drove
runsc/container directly. It now only parses the bubblewrap command line
and translates it into sandbox.Options; //sandboxexec/sandbox owns the
bundle, the runsc invocation and the container lifecycle.
2026-08-31 01:51:10 +00:00

41 lines
864 B
Python

load("//tools:defs.bzl", "go_library", "go_test")
package(
default_applicable_licenses = ["//:license"],
licenses = ["notice"],
)
go_library(
name = "sandbox",
srcs = [
"debug.go",
"oci.go",
"sandbox.go",
"storage.go",
],
visibility = ["//:__subpackages__"],
deps = [
"//pkg/abi/linux",
"//pkg/log",
"//pkg/sighandling",
"//runsc/specutils",
"@com_github_opencontainers_runtime_spec//specs-go:go_default_library",
],
)
go_test(
name = "sandbox_test",
srcs = [
"oci_test.go",
"sandbox_test.go",
"storage_test.go",
],
data = ["//:release"],
tags = ["nogotsan"],
deps = [
":sandbox",
"//pkg/test/testutil",
"@com_github_opencontainers_runtime_spec//specs-go:go_default_library",
],
)