restricted networking for all sandboxing methods, new seatbelt profiles, updated docs, fixes to sandbox build, debugging through sandbox (#891)

This commit is contained in:
Olcan
2025-06-10 08:58:37 -07:00
committed by GitHub
parent 895c1f132f
commit e38d2078cc
16 changed files with 511 additions and 47 deletions

View File

@@ -33,11 +33,12 @@ execSync('node ./scripts/check-build-status.js', {
// inside sandbox SANDBOX should be set and sandbox_command.js should fail
const nodeArgs = [];
try {
execSync('node scripts/sandbox_command.js -q', {
stdio: 'inherit',
const sandboxCommand = execSync('node scripts/sandbox_command.js', {
cwd: root,
});
if (process.env.DEBUG) {
})
.toString()
.trim();
if (process.env.DEBUG && !sandboxCommand) {
if (process.env.SANDBOX) {
const port = process.env.DEBUG_PORT || '9229';
nodeArgs.push(`--inspect-brk=0.0.0.0:${port}`);