tree 1b62332d9e89671ccd3af4e9c762e7614fa6344b
parent 214a5949291c5a45ff9cc2ad41d6e7508a73167a
author frazze-jobb <fredrik.frantzen@ericsson.com> 1630943127 -0700
committer Copybara-Service <copybara-worker@google.com> 1630943205 -0700

Implement Hermetic sandbox with support for hardlinks

Adds linux-sandbox flag:
--experimental_use_hermetic_linux_sandbox - Configure linux-sandbox
 to run in a chroot environment to prevent access to files not
 mentioned in the bazel rules unless they can be found via
 explicitly whitelisted directories using --sandbox_add_mount_pair
 create hardlinks instead of symlinks, and fallback to copying.
 In case of writes to input files, the build will be aborted.

Closes #13279.

PiperOrigin-RevId: 395104527