[PR #211] feat: use agent-infra sandbox instead of seccomp #210

New Issue

2026-02-16T09:19:51-05:00

yindo commented

2026-02-16 09:19:51 -05:00

📋 Pull Request Information

Original PR: https://github.com/langgenius/dify-sandbox/pull/211
Author: @fatelei
Created: 1/15/2026
Status: 🔄 Open

Base: main ← Head: microsandbox

📝 Commits (1)

916eecb feat: use agent-infra sandbox instead of seccomp

📊 Changes

47 files changed (+1415 additions, -73 deletions)

View changed files

📝 .gitignore (+4 -1)
➕ .golangci.yml (+102 -0)
➕ .pre-commit-config.yaml (+36 -0)
➕ Makefile (+96 -0)
📝 README.md (+66 -8)
📝 cmd/lib/nodejs/main.go (+2 -0)
📝 cmd/lib/python/main.go (+2 -0)
📝 cmd/test/fuzz_nodejs/main.go (+3 -0)
📝 cmd/test/fuzz_nodejs_amd64/main.go (+2 -0)
📝 cmd/test/fuzz_python/main.go (+3 -0)
📝 cmd/test/fuzz_python_amd64/main.go (+2 -0)
📝 cmd/test/permission/main.go (+2 -0)
📝 cmd/test/python/main.go (+2 -0)
📝 cmd/test/syscall_dig/main.go (+2 -0)
📝 cmd/test/tmp/main.go (+2 -0)
📝 conf/config.yaml (+12 -0)
📝 go.mod (+3 -1)
📝 go.sum (+4 -0)
📝 internal/controller/run.go (+2 -2)
📝 internal/core/lib/nodejs/add_seccomp.go (+2 -0)

...and 27 more files

📄 Description

fix #212

python execute result

nodejs execute result

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/langgenius/dify-sandbox/pull/211 **Author:** [@fatelei](https://github.com/fatelei) **Created:** 1/15/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `microsandbox` --- ### 📝 Commits (1) - [`916eecb`](https://github.com/langgenius/dify-sandbox/commit/916eecb83574b6aba1906ce197196f04df25049a) feat: use agent-infra sandbox instead of seccomp ### 📊 Changes **47 files changed** (+1415 additions, -73 deletions) <details> <summary>View changed files</summary> 📝 `.gitignore` (+4 -1) ➕ `.golangci.yml` (+102 -0) ➕ `.pre-commit-config.yaml` (+36 -0) ➕ `Makefile` (+96 -0) 📝 `README.md` (+66 -8) 📝 `cmd/lib/nodejs/main.go` (+2 -0) 📝 `cmd/lib/python/main.go` (+2 -0) 📝 `cmd/test/fuzz_nodejs/main.go` (+3 -0) 📝 `cmd/test/fuzz_nodejs_amd64/main.go` (+2 -0) 📝 `cmd/test/fuzz_python/main.go` (+3 -0) 📝 `cmd/test/fuzz_python_amd64/main.go` (+2 -0) 📝 `cmd/test/permission/main.go` (+2 -0) 📝 `cmd/test/python/main.go` (+2 -0) 📝 `cmd/test/syscall_dig/main.go` (+2 -0) 📝 `cmd/test/tmp/main.go` (+2 -0) 📝 `conf/config.yaml` (+12 -0) 📝 `go.mod` (+3 -1) 📝 `go.sum` (+4 -0) 📝 `internal/controller/run.go` (+2 -2) 📝 `internal/core/lib/nodejs/add_seccomp.go` (+2 -0) _...and 27 more files_ </details> ### 📄 Description fix #212 python execute result <img width="1216" height="1174" alt="image" src="https://github.com/user-attachments/assets/2596ddab-1826-481d-a907-b12ae8ba6d35" /> nodejs execute result <img width="1230" height="1386" alt="image" src="https://github.com/user-attachments/assets/c6034557-7d4f-49ca-845a-908410c17b31" /> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

yindo added the pull-request label 2026-02-16 09:19:51 -05:00

yindo referenced this issue

2026-02-16 09:19:51 -05:00

[PR #210] [MERGED] Use DHI images instead of standard library images for better security #211

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: langgenius/dify-sandbox#210