Add native binary Docker backend for Rust/Go and enhance sandboxing

This commit is contained in:
elipeter 2026-05-12 02:56:51 -04:00
parent 62bd480db3
commit 09553f5b4c
8 changed files with 424 additions and 17 deletions

View file

@ -233,8 +233,19 @@ jobs:
- uses: taiki-e/install-action@nextest
- name: Pull python image for sandbox tests
run: docker pull python:3-slim
- name: Pull language images for sandbox tests
run: |
docker pull python:3-slim
docker pull node:20-slim
docker pull eclipse-temurin:21-jre-jammy
docker pull php:8-cli
- name: Smoke-test interpreter availability
run: |
docker run --rm python:3-slim python3 --version
docker run --rm node:20-slim node --version
docker run --rm eclipse-temurin:21-jre-jammy java -version
docker run --rm php:8-cli php --version
- name: Rust tests with docker (sandbox escape gate)
run: cargo nextest run --all-features --test dynamic_sandbox_escape --test dynamic_parity