goboxd: Team Sudo — Baratam Praneeth Gupta (25F2007012)Team/sudo

.dockerignore

@@ -0,0 +1,17 @@
+docs/
+*.md
+*.pdf
+.git/
+.github/
+.vscode/
+.gitlab-ci.yml
+.golangci.yml
+contextmedia_Alagents/
+*.log
+tmp/
+tests/
+scripts/
+# Allow lang_install scripts into Docker build context
+!scripts/lang_install/
+!scripts/lang_install/**
+external/

.github/workflows/ci.yml

@@ -0,0 +1,53 @@
+name: CI
+
+on:
+  push:
+    branches: [main, team/sudo]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
+        with:
+          go-version: '1.22'
+      - uses: golangci/golangci-lint-action@v3
+        with:
+          version: v1.64.8
+          args: --timeout=5m
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
+        with:
+          go-version: '1.22'
+      - run: go build -v ./cmd/goboxd
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
+        with:
+          go-version: '1.22'
+      - run: go test -v -race -cover $(go list ./... | grep -v '/tests')
+
+  docker:
+    name: Docker Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v2
+      - uses: docker/build-push-action@v4
+        with:
+          context: .
+          push: false
+          tags: goboxd:latest

.gitignore

@@ -28,5 +28,17 @@ go.work.sum
 .env
 
 # Editor/IDE
-# .idea/
-# .vscode/
+.idea/
+.vscode/
+nsjail/
+external/nsjail/
+contextmedia_AIagents/goboxd
+server.log
+nsjail/
+contextmedia_AIagents/
+*.Zone.Identifier
+
+# Local compiled binaries and scripts
+nsjail
+test_endpoints*.sh
+payloads/*

.gitlab-ci.yml

@@ -0,0 +1,48 @@
+stages:
+  - lint
+  - build
+  - test
+  - docker
+
+variables:
+  GO_VERSION: "1.22"
+  GOPATH: $CI_PROJECT_DIR/.go
+  PATH: $GOPATH/bin:$PATH
+
+lint:
+  stage: lint
+  image: golang:1.22-alpine
+  before_script:
+    - apk add --no-cache curl git
+    - curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.64.8
+  script:
+    - golangci-lint run --timeout=5m
+  allow_failure: false
+
+build:
+  stage: build
+  image: golang:1.22-alpine
+  script:
+    - go build -v ./cmd/goboxd
+  artifacts:
+    paths:
+      - cmd/goboxd/goboxd
+    expire_in: 1 hour
+
+test:
+  stage: test
+  image: golang:1.22-alpine
+  script:
+    - go test -v -race -cover ./...
+  coverage: '/^coverage:\s*(\d+(?:\.\d+)?%)/'
+
+docker:
+  stage: docker
+  image: docker:latest
+  services:
+    - docker:dind
+  script:
+    - docker build -t goboxd:latest .
+  only:
+    - main
+    - merge_requests

.golangci.yml

@@ -0,0 +1,83 @@
+# golangci-lint v1.64.x configuration for goboxd
+# Go 1.22+ systems project with security focus
+
+run:
+  timeout: 5m
+  go: '1.22'
+
+linters:
+  enable:
+    - asasalint        # Find misuse of sync/atomic
+    - bidichk          # Check dangerous unicode bidirectional characters
+    - bodyclose        # Ensure HTTP response bodies are closed
+    - decorder         # Check declaration order
+    - dogsled          # Prevent blank identifier assignments
+    - errcheck         # Unchecked error returns
+    - errorlint        # Improper error wrapping
+    - gofmt            # Enforce gofmt formatting
+    - govet            # Official Go vet
+    - ineffassign      # Ineffectual assignments
+    - loggercheck      # Incorrect logging calls
+    - misspell         # Spelling errors in comments
+    - prealloc         # Preallocate slices when possible
+    - staticcheck      # Advanced static analysis
+    - typecheck        # Type checking
+    - unconvert        # Unnecessary type conversions
+    - unused           # Unused code detection
+    - whitespace       # Whitespace issues
+    - gosimple         # Simplify code
+    - gocritic         # Opinionated Go code style checks
+
+  disable:
+    - wrapcheck        # Too strict for internal errors
+    - exhaustive       # Not needed here
+    - cyclop           # Cyclomatic complexity (systems code can exceed)
+    - dupl             # Duplicate code (acceptable at boundaries)
+    - forbidigo        # Allow print/fmt in specific contexts
+    - gocognit         # Cognitive complexity (systems code unavoidably complex)
+    - gocyclo          # Cyclomatic complexity (systems code can exceed)
+    - lll              # Line length (we use editor wrapping)
+    - mnd              # Magic numbers (legitimate in systems code)
+    - varnamelen       # Variable name length (ok for single-use iterators)
+
+linters-settings:
+  gocritic:
+    enabled-tags:
+      - diagnostic
+      - style
+      - performance
+      - experimental
+    disabled-checks:
+      - commentedOutCode
+      - hugeParam
+
+  errcheck:
+    check-type-assertions: true
+    check-blank: true
+    exclude-functions:
+      - io.Copy
+      - fmt.Fprint
+
+  staticcheck:
+    checks: ["all"]
+
+  gosimple:
+    checks: ["all"]
+
+  unused:
+    check-exported: false
+
+  govet:
+    enable:
+      - all
+    disable:
+      - shadow
+
+issues:
+  exclude-rules:
+    - source: "var _ ="
+      linters:
+        - govet
+    - source: "^_"
+      linters:
+        - unparam

Dockerfile

@@ -1,39 +1,81 @@
-# syntax=docker/dockerfile:1.7
+# Stage 1: Build nsjail
+FROM debian:trixie-slim AS nsjail-builder
+ENV DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && apt-get install -y \
+    autoconf bison flex gcc g++ git libprotobuf-dev libnl-route-3-dev libtool make pkg-config protobuf-compiler
+WORKDIR /nsjail
+RUN git clone https://github.com/google/nsjail.git . && \
+    git checkout 3.4 && \
+    make -j$(nproc)
 
-ARG GO_VERSION=1.23
-ARG DEBIAN_VERSION=bookworm
-ARG NSJAIL_VERSION=3.4
+# Stage 2: Build Go binary
+FROM golang:1.22-bookworm AS go-builder
 
-# ---- Build nsjail from source ----
-FROM debian:${DEBIAN_VERSION}-slim AS nsjail-builder
-ARG NSJAIL_VERSION
-RUN apt-get update && apt-get install -y --no-install-recommends \
-        autoconf bison ca-certificates flex g++ gcc git libnl-route-3-dev \
-        libprotobuf-dev libtool make pkg-config protobuf-compiler \
-    && rm -rf /var/lib/apt/lists/*
-RUN git clone --depth 1 --branch ${NSJAIL_VERSION} https://github.com/google/nsjail.git /src/nsjail \
-    && make -C /src/nsjail \
-    && install -m 0755 /src/nsjail/nsjail /usr/local/bin/nsjail
-
-# ---- Builder / dev image (Go + linters + nsjail) ----
-FROM golang:${GO_VERSION}-${DEBIAN_VERSION} AS builder
-RUN apt-get update && apt-get install -y --no-install-recommends \
-        libnl-route-3-200 libprotobuf32 \
-    && rm -rf /var/lib/apt/lists/*
-COPY --from=nsjail-builder /usr/local/bin/nsjail /usr/local/bin/nsjail
-RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
 WORKDIR /src
-COPY go.mod ./
+COPY go.mod go.sum ./
 RUN go mod download
 COPY . .
-RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /out/goboxd ./cmd/goboxd
 
-# ---- Runtime image ----
-FROM debian:${DEBIAN_VERSION}-slim AS runtime
+ARG VERSION=0.1.0
+ARG COMMIT=unknown
+ENV GOTOOLCHAIN=local
+
+RUN CGO_ENABLED=0 go build \
+    -ldflags="-s -w -X main.version=${VERSION} -X main.commit=${COMMIT}" \
+    -o /usr/local/bin/goboxd \
+    ./cmd/goboxd
+
+# Stage 3: Runtime — trixie provides GLIBC 2.41 (nsjail requires >= 2.38)
+FROM debian:trixie-slim
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install nsjail runtime dependencies and base system tools.
+# Language toolchains are installed via per-language scripts below.
 RUN apt-get update && apt-get install -y --no-install-recommends \
-        ca-certificates libnl-route-3-200 libprotobuf32 \
+    bash ca-certificates \
+    libnl-route-3-200 libprotobuf32t64 \
     && rm -rf /var/lib/apt/lists/*
-COPY --from=nsjail-builder /usr/local/bin/nsjail /usr/local/bin/nsjail
-COPY --from=builder        /out/goboxd          /usr/local/bin/goboxd
+
+# Install language toolchains via per-language scripts.
+# Adding a new language = one .sh file in scripts/lang_install/ + one YAML block.
+# No Dockerfile change required.
+COPY scripts/lang_install/ /tmp/lang_install/
+RUN apt-get update \
+    && for f in /tmp/lang_install/*.sh; do echo "== $f =="; bash "$f" || exit 1; done \
+    && rm -rf /var/lib/apt/lists/* /tmp/lang_install
+
+# nsjail pinned at tag 3.4 — see .gitmodules
+COPY --from=nsjail-builder /nsjail/nsjail /usr/sbin/nsjail
+RUN chmod 0755 /usr/sbin/nsjail
+COPY --from=go-builder /usr/local/bin/goboxd /usr/local/bin/goboxd
+
+# Copy Go from builder stage and symlink to /usr/bin/go
+COPY --from=go-builder /usr/local/go /usr/local/go
+RUN ln -s /usr/local/go/bin/go /usr/bin/go && \
+    ln -s /usr/local/go/bin/gofmt /usr/bin/gofmt
+
+
+RUN mkdir -p /etc/goboxd
+COPY languages.yaml /etc/goboxd/languages.yaml
+RUN mkdir -p /tmp/goboxd && chmod 1777 /tmp/goboxd
+
+ENV NSJAIL_PATH=/usr/sbin/nsjail
+ENV LANGUAGES_CONFIG=/etc/goboxd/languages.yaml
+
+# Smoke-test every language toolchain at build time
+RUN python3 --version \
+    && node --version \
+    && gcc --version \
+    && g++ --version \
+    && java -version \
+    && javac -version \
+    && iverilog -V \
+    && bash --version \
+    && ruby --version \
+    && rustc --version \
+    && kotlinc -version \
+    && go version \
+    && lua5.4 -v
+
 EXPOSE 8080
-ENTRYPOINT ["/usr/local/bin/goboxd"]
+ENTRYPOINT ["/usr/local/bin/goboxd", "--config", "/etc/goboxd/languages.yaml"]

Dockerfile.offline

@@ -0,0 +1,18 @@
+FROM goboxd:latest
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install npm (needed for tsc) and scala (JDK already present from kotlin)
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends npm scala \
+    && npm install -g typescript \
+    && rm -rf /var/lib/apt/lists/*
+
+# Update languages.yaml with TypeScript + Scala + tsc path fix
+COPY languages.yaml /etc/goboxd/languages.yaml
+
+# Smoke-test new toolchains
+RUN tsc --version && scala -version
+
+EXPOSE 8080
+ENTRYPOINT ["/usr/local/bin/goboxd", "--config", "/etc/goboxd/languages.yaml"]