feat(sandbox): Bubblewrap mount scaffolding and UNIX domain socket bridge #5

New issue

Closed

opened 2026-09-09 10:08:48 +00:00 by larandar · 1 comment

larandar commented

2026-09-09 10:08:48 +00:00

Owner

Proposal

Provide the executor's Bubblewrap sandbox boundary and the UNIX-domain socket bridge required for workflow runs.

Design

Build a probed mount table and launch Bubblewrap with --unshare-all, --unshare-net, and --clearenv plus an explicit environment whitelist. Mask sensitive .dsh-run/ paths and bind-mount the approved /run/wf.sock bridge.

Tasks

2.1 Build and probe the mount table.
2.2 Add the Bubblewrap namespace isolation flags.
2.4 Add the clear-environment whitelist.
2.5 Mask sensitive .dsh-run/ paths and bind-mount /run/wf.sock.

Gherkin Specification Delta

must.contracts.ting-workflows.executor.bubblewrap-sandbox-scaffolding

Scenario: Start a workflow in the hermetic Bubblewrap boundary

GIVEN a workflow run and a probed mount table
WHEN the executor launches Bubblewrap
THEN all, network, and environment isolation flags are applied
AND sensitive .dsh-run/ paths are masked while the approved /run/wf.sock is available.

## Proposal Provide the executor's Bubblewrap sandbox boundary and the UNIX-domain socket bridge required for workflow runs. ## Design Build a probed mount table and launch Bubblewrap with `--unshare-all`, `--unshare-net`, and `--clearenv` plus an explicit environment whitelist. Mask sensitive `.dsh-run/` paths and bind-mount the approved `/run/wf.sock` bridge. ## Tasks - 2.1 Build and probe the mount table. - 2.2 Add the Bubblewrap namespace isolation flags. - 2.4 Add the clear-environment whitelist. - 2.5 Mask sensitive `.dsh-run/` paths and bind-mount `/run/wf.sock`. ## Gherkin Specification Delta ### must.contracts.ting-workflows.executor.bubblewrap-sandbox-scaffolding **Scenario: Start a workflow in the hermetic Bubblewrap boundary** - **GIVEN** a workflow run and a probed mount table - **WHEN** the executor launches Bubblewrap - **THEN** all, network, and environment isolation flags are applied - **AND** sensitive `.dsh-run/` paths are masked while the approved `/run/wf.sock` is available.

larandar added a new dependency

2026-09-09 10:09:16 +00:00

#2 Session: ting-workflow-executor — embedded Nushell, bwrap sandboxing, and OWS DSL 1.0

larandar added a new dependency

2026-09-09 10:09:16 +00:00

#6 feat(sandbox): PID 1 process tree lifecycle and ownership reaper

larandar commented

2026-09-09 10:15:29 +00:00

Author

Owner

Superseded by 1-feature deliverable decomposition per freeholder ruling (issues #11+).

larandar closed this issue