Interactive stdin

[AlphaNecron]

Is it even possible to pipe standard input to the isolated program? I'm trying to implement interactive mode for problems.

[AlphaNecron]

Btw, can we run x instances of judge on x cores? That would be great if we could customize the core the judge should run on.

[AlphaNecron]

I'm implementing go-sandbox within my own project so I can directly use seccomp, so how to do it with seccomp?

[criyle]

You can pass the compiled seccomp BPF into https://github.com/criyle/go-judge/blob/master/env/linuxcontainer/environment_linux.go#L29 to apply seccomp for every execution.

[AlphaNecron]

Oh, so we're combining cgroup and seccomp in order to restrict CPU usage to a specific core?

[criyle]

In order to restrict CPU usage, you need to enable CPU share cgroup. To restrict CPU cores to use, you need to enable CPU set cgroup. To restrict syscall, you need seccomp.

[AlphaNecron]

I meant restricting allowed CPU cores. Anyways, thanks!

[criyle]

You may use the streaming protobuf interface to pipe stdin and stdout. Or you may create fifo pipe file and pass it as file with pipe:true. You may look at the executershell that demos an interactive shell in the isolated environment.

[AlphaNecron]

Thanks, gonna try it.

[AlphaNecron]

Btw, CPU restriction refers to logical cores or physical cores?

[criyle]

Yes, the default parallelism equals to the number of logical cores and you can adjust it by command line argument.

[AlphaNecron]

Thanks.

[AlphaNecron]

Is it possible to get the output as a variable directly?

[criyle]

Yes, you can specify the stdout in the copyOut parameter.

[AlphaNecron]

Thanks, gonna try.

[AlphaNecron]

cgroup throws this, any ideas?

[zhouyusd]

The executorserver need root privilege to create cgroup.

[AlphaNecron]

Oh, thanks!