everruns-core 0.43.0

Transport-neutral agent execution contracts for Everruns
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

//! `everruns-sandbox-exec`: apply kernel containment, then become the shell.
//!
//! Not a user-facing command. A [`SandboxProvider`] spawns it with the fixed
//! argument list [`WorkerRequest::parse`] accepts, and it never returns on
//! success: it execs bash in place so the restrictions it installed are the
//! ones the shell and every descendant run under.
//!
//! [`SandboxProvider`]: everruns_core::host::containment::SandboxProvider
//! [`WorkerRequest::parse`]: everruns_core::host::containment::worker::WorkerRequest::parse

fn main() -> anyhow::Result<()> {
    everruns_core::host::containment::worker::run_from_args(std::env::args_os().skip(1))?;
    // `run_from_args` returns `Infallible` on success, so this is unreachable.
    Ok(())
}