fix(bash): allow process substitution on nsjail

windmill-labs · Feb 18, 2025 · d4f61f1 · d4f61f1
1 parent 138cedf
commit d4f61f1
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/backend/windmill-worker/nsjail/run.bash.config.proto b/backend/windmill-worker/nsjail/run.bash.config.proto
@@ -21,10 +21,24 @@ mount {
 	is_bind: true
 }
 
+mount {
+  src: "/proc/self/fd"
+  dst: "/dev/fd"
+  is_symlink: true
+  mandatory: false
+}
+
+mount {
+    src: "/bin"
+    dst: "/bin"
+	is_bind: true
+}
+
 mount {
     src: "/opt/microsoft"
     dst: "/opt/microsoft"
 	is_bind: true
+    mandatory: false
 }
 
 mount {

diff --git a/backend/windmill-worker/nsjail/run.powershell.config.proto b/backend/windmill-worker/nsjail/run.powershell.config.proto
@@ -21,6 +21,13 @@ mount {
 	is_bind: true
 }
 
+mount {
+  src: "/proc/self/fd"
+  dst: "/dev/fd"
+  is_symlink: true
+  mandatory: false
+}
+
 mount {
     src: "/opt/microsoft"
     dst: "/opt/microsoft"