I would like to create a server that allows other users to run white-listed functions. It would be nice if the untrusted code were packaged as hex packages. The use case is to allow users to run plugins to a framework in a shared server environment. I’ve seen some existing implementations/experime…

There are extremely many ways to call a function - in a lot of places you can pass {module, function, arguments} tuples, you can create atoms at runtime in many ways as well. I don’t see a viable way of filtering this. OS-process-level sandboxing is definitely a much better idea.

I know i am a Cassandra at that point and that i mess a bit with the whole fun thing. But Docker is not a sandbox. Is it better than the BEAM isolation ? Yes probably. But if you need a secure sandbox with Docker, the advise right now and for the year to come probably is to have one VM per Docker c…

[image] DianaOlympos: But Docker is not a sandbox. Is it better than the BEAM isolation ? Yes probably. But if you need a secure sandbox with Docker, the advise right now and for the year to come probably is to have one VM per Docker container. If you want a more secure sandbox/container, have a…

I’ve found another thread discussing sandboxing here: Redirecting to Google Groups Also, found one elixir lua impementation (not sure if this is sandboxed though): https://github.com/bendiken/exlua

There are a lot of LUA implementations for the BEAM: GitHub - rvirding/luerl: Lua in Erlang · GitHub by the very own RVirding, this is implemented in erlang, not super fast, but very safe, it implements ‘most’ of lua, good enough for simple scripting. However you can implement lua things in erla…

Thank you for all the advice. What would a “simple safe scripting language on Elixir” look like to you? Would this also use ports? Implemented in C?

[image] bjfish: What would a “simple safe scripting language on Elixir” look like to you? Would this also use ports? Implemented in C? I’d personally would use either luerl or actual LUA through a PORT, depending on the feature-set I needed. If I were to make a new scripting language, it wou…

It is basically impossible to sandbox an erlang/elixir system if you allow it to run untested code, especially if you allow loading already compiled code. You *could* interpret erlang/elixir code but it would have to be very limiting but it is still possible to get around this. If you want to run th…

[image] OvermindDL1: Exactly this! Docker is NOT a sandbox, it is pretty trivial to ‘break out of it’, and it is designed for process segmentation, not sandboxing, and the developers are upfront about that. Anyone using docker to sandbox has a ticking time-bomb… I know of people who use LXC …

[image] Qqwy: I know of people who use LXC to run untrusted code in a sandbox instead. How safe is this? Better than docker, but still not secure as it is possible to talk across kernel bounds, and it still has overhead compared to, say, Illumos’s Containers.

Elixir Programming Language Forum

How to create a sandbox to run untrusted code/modules?

Questions & Help Questions

DianaOlympos April 13, 2017, 8:30am 23

cough cough Illumos Zones cough cough