增强判题和 docker 安全性
This commit is contained in:
@@ -62,6 +62,8 @@ class JudgeClient(object):
|
|||||||
" --max-real-time " + str(self._max_real_time / 1000.0 * 2) + \
|
" --max-real-time " + str(self._max_real_time / 1000.0 * 2) + \
|
||||||
" --max-memory " + str(self._max_memory * 1000 * 1000) + \
|
" --max-memory " + str(self._max_memory * 1000 * 1000) + \
|
||||||
" --network false" + \
|
" --network false" + \
|
||||||
|
" --remount-dev true " + \
|
||||||
|
" --reset-env true " + \
|
||||||
" --syscalls '" + self._language["syscalls"] + "'" + \
|
" --syscalls '" + self._language["syscalls"] + "'" + \
|
||||||
" --max-nprocess 20" + \
|
" --max-nprocess 20" + \
|
||||||
" --uid " + str(lrun_uid) + \
|
" --uid " + str(lrun_uid) + \
|
||||||
|
|||||||
@@ -14,7 +14,7 @@ def judge(submission_id, time_limit, memory_limit, test_case_id):
|
|||||||
command = "%s run --privileged --rm " \
|
command = "%s run --privileged --rm " \
|
||||||
"--link mysql " \
|
"--link mysql " \
|
||||||
"-v %s:/var/judger/test_case/:ro " \
|
"-v %s:/var/judger/test_case/:ro " \
|
||||||
"-v %s:/var/judger/code/ " \
|
"-v %s:/var/judger/code/:ro " \
|
||||||
"-v %s:/var/judger/code/log/ " \
|
"-v %s:/var/judger/code/log/ " \
|
||||||
"--device /dev/null:/dev/null " \
|
"--device /dev/null:/dev/null " \
|
||||||
"%s " \
|
"%s " \
|
||||||
|
|||||||
Reference in New Issue
Block a user