dify沙盒

Yeuoly 93beee1510 fix: requests operation not permitted (#81) 1 年之前
.github 17bb213f2d fix: missing native deps (#74) 1 年之前
build e769713929 fix: vulns, uncompleted results (#41) 1 年之前
cmd 93beee1510 fix: requests operation not permitted (#81) 1 年之前
conf e5b7e58a03 allow to set ALLOWED_SYSCALLS environment variables (#45) 1 年之前
dependencies 62954e9c30 fix: amd64 1 年之前
docker d851649e4b fix: Version '2.6.2-2' for 'expat' was not found (#69) 1 年之前
internal 93beee1510 fix: requests operation not permitted (#81) 1 年之前
tests 17bb213f2d fix: missing native deps (#74) 1 年之前
.gitignore ebb0325f35 chore: update .gitignore (#47) 1 年之前
FAQ.md 072abe73aa update FAQ (#28) 1 年之前
LICENSE a57aa758c7 License (#9) 1 年之前
README.md 7f45f6df11 add workflow (#29) 1 年之前
go.mod 54778029a9 feat: nodejs 1 年之前
go.sum 54778029a9 feat: nodejs 1 年之前
install.sh 91696da794 fix 1 年之前
workflow.png 7f45f6df11 add workflow (#29) 1 年之前

README.md

Dify-Sandbox

Introduction

Dify-Sandbox offers a simple way to run untrusted code in a secure environment. It is designed to be used in a multi-tenant environment, where multiple users can submit code to be executed. The code is executed in a sandboxed environment, which restricts the resources and system calls that the code can access.

Use

Requirements

DifySandbox currently only supports Linux, as it's designed for docker containers. It requires the following dependencies:

  • libseccomp
  • pkg-config
  • gcc
  • golang 1.20.6

Steps

  1. Clone the repository using git clone https://github.com/langgenius/dify-sandbox and navigate to the project directory.
  2. Run ./install.sh to install the necessary dependencies.
  3. Run ./build/build_[amd64|arm64].sh to build the sandbox binary.
  4. Run ./main to start the server.

If you want to debug the server, firstly use build script to build the sandbox library binaries, then debug as you want with your IDE.

FAQ

Refer to the FAQ document

Workflow

workflow