Hi all I m trying to wrap a bash script with an ExternalTool Pants #plugins

Hi all! I'm trying to wrap a bash script with an E...

square-psychiatrist-19087

12/16/2023, 8:35 PM

Hi all! I'm trying to wrap a bash script with an ExternalTool. It uses a lot of linux binaries, so I've added a bunch of shims, but it still fails. Does anyone know how sandboxing works exactly? What are the common mistakes I could have made? Thanks (the plugin https://github.com/grihabor/pants-makeself-plugin)

curved-television-6568

12/16/2023, 10:29 PM

I think easiest is to run with

--keep-sandboxes=always

and then inspect the

__run.sh

from the sandbox you’re interested in.

gorgeous-winter-99296

12/16/2023, 11:54 PM

Took a quick peek; I think you're not adding the

BinaryShims.path_component

to the process environment PATH.

gorgeous-winter-99296

12/16/2023, 11:54 PM

I think the most important thing to remember about sandboxes (apart from ^ inspecting) is that if you don't specify something, it's empty - env, files, etc.

square-psychiatrist-19087

12/17/2023, 11:57 AM

--keep-sandboxes=always

Yep, I tried that,

__run.sh

works without errors

not adding the
BinaryShims.path_component
to the process environment PATH

Thanks! I'll try that

happy-kitchen-89482

12/17/2023, 4:30 PM

Yeah, unfortunately
__run.sh
doesn't isolate env vars the way Pants does when it runs in the sandbox, so it's not completely 1:1

happy-kitchen-89482

12/17/2023, 5:38 PM

Actually, that is not true

happy-kitchen-89482

12/17/2023, 5:39 PM

__run.sh

does use

env -i

to set the environment

2 Views

Open in Slack

Previous Next