panyy
/
UnisKB
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

refactor: set MAXKB_SANDBOX_HOME env.

v3.2
liqiang-fit2cloud 2025-11-07 11:10:14 +08:00
parent 22fb0b55bf
commit 180ee40cdc
3 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/common/utils/tool_code.py
View File

@ -18,7 +18,7 @@ class ToolExecutor:
def __init__(self, sandbox=False): def __init__(self, sandbox=False):
self.sandbox = sandbox self.sandbox = sandbox
if sandbox: if sandbox:
self.sandbox_path = '/opt/maxkb-app/sandbox' self.sandbox_path = CONFIG.get("SANDBOX_HOME", '/opt/maxkb-app/sandbox')
self.user = 'sandbox' self.user = 'sandbox'
else: else:
self.sandbox_path = os.path.join(PROJECT_DIR, 'data', 'sandbox') self.sandbox_path = os.path.join(PROJECT_DIR, 'data', 'sandbox')

2
installer/Dockerfile
View File

@ -13,7 +13,7 @@ RUN apt-get update && \
apt-get clean all && \ apt-get clean all && \
rm -rf /var/lib/apt/lists/* rm -rf /var/lib/apt/lists/*
WORKDIR /opt/maxkb-app WORKDIR /opt/maxkb-app
RUN gcc -shared -fPIC -o /opt/maxkb-app/sandbox/sandbox.so /opt/maxkb-app/installer/sandbox.c -ldl && \ RUN gcc -shared -fPIC -o ${MAXKB_SANDBOX_HOME}/sandbox.so /opt/maxkb-app/installer/sandbox.c -ldl && \
rm -rf /opt/maxkb-app/ui && \ rm -rf /opt/maxkb-app/ui && \
pip install uv --break-system-packages && \ pip install uv --break-system-packages && \
python -m uv pip install -r pyproject.toml && \ python -m uv pip install -r pyproject.toml && \

1
installer/Dockerfile-base
View File

@ -45,6 +45,7 @@ ENV PATH=/opt/py3/bin:$PATH \
MAXKB_CONFIG_TYPE=ENV \ MAXKB_CONFIG_TYPE=ENV \
MAXKB_LOG_LEVEL=INFO \ MAXKB_LOG_LEVEL=INFO \
MAXKB_SANDBOX=1 \ MAXKB_SANDBOX=1 \
MAXKB_SANDBOX_HOME=/opt/maxkb-app/sandbox
MAXKB_SANDBOX_PYTHON_PACKAGE_PATHS="/opt/py3/lib/python3.11/site-packages,/opt/maxkb-app/sandbox/python-packages,/opt/maxkb/python-packages" \ MAXKB_SANDBOX_PYTHON_PACKAGE_PATHS="/opt/py3/lib/python3.11/site-packages,/opt/maxkb-app/sandbox/python-packages,/opt/maxkb/python-packages" \
MAXKB_SANDBOX_PYTHON_BANNED_KEYWORDS="subprocess.,system(,exec(,execve(,pty.,eval(,compile(,shutil.,input(,__import__" \ MAXKB_SANDBOX_PYTHON_BANNED_KEYWORDS="subprocess.,system(,exec(,execve(,pty.,eval(,compile(,shutil.,input(,__import__" \
MAXKB_SANDBOX_PYTHON_BANNED_HOSTS="127.0.0.1,localhost,host.docker.internal,maxkb,pgsql,redis" \ MAXKB_SANDBOX_PYTHON_BANNED_HOSTS="127.0.0.1,localhost,host.docker.internal,maxkb,pgsql,redis" \