diff options
Diffstat (limited to 'internal')
| -rw-r--r-- | internal/pkg/exec.go | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/internal/pkg/exec.go b/internal/pkg/exec.go index c61ddc1c..de29ff5d 100644 --- a/internal/pkg/exec.go +++ b/internal/pkg/exec.go @@ -8,6 +8,7 @@ import ( "runtime" "slices" "syscall" + "time" "hakurei.app/container" "hakurei.app/container/check" @@ -186,6 +187,11 @@ func (a *execArtifact) Cure(c *CureContext) (err error) { return a.cure(c, false) } +const ( + // execWaitDelay is passed through to [container.Params]. + execWaitDelay = 15 * time.Second +) + // cure is like Cure but allows optional host net namespace. This is used for // the [KnownChecksum] variant where networking is allowed. func (a *execArtifact) cure(c *CureContext, hostNet bool) (err error) { @@ -272,6 +278,7 @@ func (a *execArtifact) cure(c *CureContext, hostNet bool) (err error) { z := container.New(ctx, a.msg) z.ForwardCancel = true + z.WaitDelay = execWaitDelay z.SeccompPresets |= std.PresetStrict z.ParentPerm = 0700 z.HostNet = hostNet |