Skip to main content

bubblewrap sandbox for insights components.

Project description

Insights Sandbox

Run rules with access only to necessary binaries and the archive working directory.


  • Create a sandbox using bubblewrap (bwrap).
    • Enable only required linux namespaces (see man namespaces for more info).
  • Communicate with the sandbox using zeromq over named pipes.
    • zmq hides underlying buffer details (man 7 pipe for fifos).


Client <-> runner adapter proxy <-> named pipes <-> [controller <-> runner adapter <-> runner]

The Client creates named pipes and a child process that uses bwrap to invoke insights_sandbox.consumer.

The client creates a RunnerAdapterProxy and configures it with zmq functions for sending and recieving messages over the pipes. The proxy is used to setup the Runner via the Controller and RunnerAdapter.


CentOS 7:
yum install epel-release
yum install bubblewrap

dnf install epel-release
dnf install bubblewrap

python3 -m venv .
. bin/activate
pip install -e .[develop]

Test an archive

./ -p examples.rules <archive>

Example Code

#!/usr/bin/env python3
This script is only for testing the sandbox.
import argparse

from insights import dr, parse_plugins
from insights_sandbox.client import Client

def parse_args():
    p = argparse.ArgumentParser()
    p.add_argument("--plugins", "-p", help="plugins to load", default="")
    p.add_argument("archive", help="pass an archive to analyze.")
    return p.parse_args()

def main():
    args = parse_args()
    broker = dr.Broker()
    packages = parse_plugins(args.plugins)
    with Client(packages=packages) as client:
        doc = client.process(args.archive, broker=broker)

if __name__ == "__main__":

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

insights-sandbox-0.1.0.linux-x86_64.tar.gz (16.0 kB view hashes)

Uploaded Source

Built Distribution

insights_sandbox-0.1.0-py3-none-any.whl (10.9 kB view hashes)

Uploaded Python 3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page