Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-20 01:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

judge: add message to inform sandbox upgrade (#1111)

Browse Source
This commit is contained in:
Yang Gao authored and GitHub committed 2025-12-30 06:56:25 +08:00
1 parent 4dda4feb2c
commit 0002801058
1 file changed
+5
Download Patch File Download Diff File Expand all files Collapse all files
packages/hydrojudge/src/sandbox.ts
+5
View File
@@ -219,12 +219,14 @@ export async function versionCheck(reportWarn: (str: string) => void, reportErro
let sandboxVersion: string; let sandboxVersion: string;
let sandboxCgroup: number; let sandboxCgroup: number;
let sandboxCgroupControllers: string[] | null; let sandboxCgroupControllers: string[] | null;
let fixSymlinkEscape: boolean;
try { try {
const version = await client.version(); const version = await client.version();
sandboxVersion = version.buildVersion.split('v')[1]; sandboxVersion = version.buildVersion.split('v')[1];
const config = await client.config(); const config = await client.config();
sandboxCgroup = config.runnerConfig?.cgroupType || 0; sandboxCgroup = config.runnerConfig?.cgroupType || 0;
sandboxCgroupControllers = config.runnerConfig?.cgroupControllers || null; sandboxCgroupControllers = config.runnerConfig?.cgroupControllers || null;
fixSymlinkEscape = config.fixSymlinkEscape ?? false;
} catch (e) { } catch (e) {
if (e?.code === 'ECONNREFUSED') reportError('Failed to connect to sandbox, please check sandbox_host config and if your sandbox is running.'); if (e?.code === 'ECONNREFUSED') reportError('Failed to connect to sandbox, please check sandbox_host config and if your sandbox is running.');
else reportError('Your sandbox version is tooooooo low! Please upgrade!'); else reportError('Your sandbox version is tooooooo low! Please upgrade!');
@@ -242,6 +244,9 @@ export async function versionCheck(reportWarn: (str: string) => void, reportErro
reportWarn('The memory cgroup controller is not enabled. This could result in inaccurate memory usage measurements.'); reportWarn('The memory cgroup controller is not enabled. This could result in inaccurate memory usage measurements.');
} }
} }
if (!fixSymlinkEscape) {
reportError('Your sandbox version is vulnerable to symlink escape issue, please upgrade!');
}
return true; return true;
} }