src/main/java/com/google/devtools/build/lib/worker/SandboxedWorker.java

// Copyright 2016 The Bazel Authors. All rights reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.devtools.build.lib.worker;

import com.google.common.collect.ImmutableList;
import com.google.common.collect.ImmutableMap;
import com.google.common.collect.ImmutableSet;
import com.google.devtools.build.lib.sandbox.SymlinkedSandboxedSpawn;
import com.google.devtools.build.lib.vfs.FileSystemUtils;
import com.google.devtools.build.lib.vfs.Path;
import java.io.IOException;

/** A {@link Worker} that runs inside a sandboxed execution root. */
final class SandboxedWorker extends Worker {
  private final Path workDir;

  SandboxedWorker(WorkerKey workerKey, int workerId, Path workDir, Path logFile) {
    super(workerKey, workerId, workDir, logFile);
    this.workDir = workDir;
  }

  @Override
  void destroy() throws IOException {
    super.destroy();
    FileSystemUtils.deleteTree(workDir);
  }

  @Override
  public void prepareExecution(WorkerKey key) throws IOException {
    // Note: the key passed in here may be different from the key passed to the constructor for
    // subsequent invocations of the same worker.
    // TODO(ulfjack): Remove WorkerKey.getInputFiles and WorkerKey.getOutputFiles; they are only
    // used to pass information to this method and the method below. Instead, don't pass the
    // WorkerKey to this method but only the input and output files.
    new SymlinkedSandboxedSpawn(
            workDir,
            workDir,
            ImmutableList.of("/does_not_exist"),
            ImmutableMap.of(),
            key.getInputFiles(),
            key.getOutputFiles(),
            ImmutableSet.of())
        .createFileSystem();
  }

  @Override
  public void finishExecution(WorkerKey key) throws IOException {
    // Note: the key passed in here may be different from the key passed to the constructor for
    // subsequent invocations of the same worker.
    new SymlinkedSandboxedSpawn(
            workDir,
            workDir,
            ImmutableList.of("/does_not_exist"),
            ImmutableMap.of(),
            key.getInputFiles(),
            key.getOutputFiles(),
            ImmutableSet.of())
        .copyOutputs(key.getExecRoot());
  }
}