Replace shell based linux sandbox setup with go code - #107

Closed

dwt wants to merge 19 commits into

mainfrom

fix/remove-dependency-on-shell-for-sandbox-initialization-on-linux

Commits on Apr 27, 2026

Migrate in sandbox initialization from shell to go code
dwt
committed
b1a5b4b
Extract go based sandbox setup arguments into a function for readability
dwt
committed
98ef7ec
REFACT: use pflags for command line parsing
dwt
committed
8da8a44
Refact: reuse config parsing function
dwt
committed
dd7094b
Extract helper functions for readability
dwt
committed
d889dfe
Fix linter warnings
dwt
committed
5b0e627
Ensure FENCE_SANDBOX is always set in the sandbox
dwt
committed
c17c734
Runtime skip linux only tests on darwin
dwt
committed
b268f62
Fix landlock allow access to internal sockets
dwt
committed
e0a159a
Fix resolve symlinks before mounting fencePath and shell
dwt
committed
a795f81
Fix duplicate lookupPath call
dwt
committed
a1506da
Fix wait for both sides of the proxy to finish reading
dwt
committed
c6a4bdc
Fix port choices are made by os instead of hardcoding
dwt
committed
abaf4fe
Fix sandbox to correctly set XDG_RUNTIME_DIR and TEMPDIR to writeable values in the sandbox
dwt
committed
bdf0e50
Change the way the command line functions work to return errors instead of calling os.Exit()
dwt
committed
a8de4fb
Rework setting environment variables to make it clear that multiple variables share the same value
dwt
committed
ebabdcf
Change the way the fence binary is accessed in the sandbox
dwt
committed
8d09d47
Add end to end test
dwt
committed
c457dea
Fix linter warnings
dwt
committed
1332846