// Copyright 2016 The Bazel Authors. All rights reserved. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. package com.google.devtools.build.lib.sandbox; import com.google.common.collect.ImmutableSet; import com.google.common.collect.ImmutableSet.Builder; import com.google.devtools.build.lib.actions.ActionExecutionContext; import com.google.devtools.build.lib.actions.EnvironmentalExecException; import com.google.devtools.build.lib.actions.ExecException; import com.google.devtools.build.lib.actions.SandboxedSpawnActionContext; import com.google.devtools.build.lib.actions.Spawn; import com.google.devtools.build.lib.analysis.BlazeDirectories; import com.google.devtools.build.lib.vfs.Path; import com.google.devtools.build.lib.vfs.PathFragment; import java.io.IOException; import java.util.Map; /** Abstract common ancestor for sandbox strategies implementing the common parts. */ abstract class SandboxStrategy implements SandboxedSpawnActionContext { private final BlazeDirectories blazeDirs; private final boolean verboseFailures; private final SandboxOptions sandboxOptions; private final SpawnHelpers spawnHelpers; public SandboxStrategy( BlazeDirectories blazeDirs, boolean verboseFailures, SandboxOptions sandboxOptions) { this.blazeDirs = blazeDirs; this.verboseFailures = verboseFailures; this.sandboxOptions = sandboxOptions; this.spawnHelpers = new SpawnHelpers(blazeDirs.getExecRoot()); } /** Gets the list of directories that the spawn will assume to be writable. */ protected ImmutableSet getWritableDirs(Path sandboxExecRoot, Map env) { Builder writableDirs = ImmutableSet.builder(); // We have to make the TEST_TMPDIR directory writable if it is specified. if (env.containsKey("TEST_TMPDIR")) { writableDirs.add(sandboxExecRoot.getRelative(env.get("TEST_TMPDIR"))); } return writableDirs.build(); } protected ImmutableSet getInaccessiblePaths() { ImmutableSet.Builder inaccessiblePaths = ImmutableSet.builder(); for (String path : sandboxOptions.sandboxBlockPath) { inaccessiblePaths.add(blazeDirs.getFileSystem().getPath(path)); } return inaccessiblePaths.build(); } @Override public boolean willExecuteRemotely(boolean remotable) { return false; } @Override public String toString() { return "sandboxed"; } @Override public boolean shouldPropagateExecException() { return verboseFailures && sandboxOptions.sandboxDebug; } public Map getMounts(Spawn spawn, ActionExecutionContext executionContext) throws ExecException { try { return spawnHelpers.getMounts(spawn, executionContext); } catch (IOException e) { throw new EnvironmentalExecException("Could not prepare mounts for sandbox execution", e); } } }