A virtual jailed shell environment for Go apps backed by an io/fs#FS.
fix(kefka): block out host envvars from kefka-cli
Signed-off-by: Xe Iaso <me@xeiaso.net>
+15
+15
cmd/kefka/main.go
+15
cmd/kefka/main.go
···
14
14
"github.com/go-git/go-billy/v5/osfs"
15
15
"github.com/spf13/pflag"
16
16
"golang.org/x/term"
17
+
"mvdan.cc/sh/v3/expand"
17
18
"mvdan.cc/sh/v3/interp"
18
19
"mvdan.cc/sh/v3/syntax"
19
20
"tangled.org/xeiaso.net/kefka/command/registry"
···
54
55
}
55
56
}
56
57
58
+
env := expand.ListEnviron(
59
+
"HOME=/",
60
+
"IFS=\n",
61
+
"MACHTYPE=x86_64-pc-linux-gnu",
62
+
"HOSTTYPE=x86_64",
63
+
"HOSTNAME=localhost",
64
+
"PWD=/",
65
+
"OLDPWD=/",
66
+
"OPTIND=1",
67
+
"KEFKA=1",
68
+
"PATH=/usr/bin:/bin",
69
+
)
70
+
57
71
var err error
58
72
sh, err = interp.New(
59
73
interp.Interactive(true),
74
+
interp.Env(env),
60
75
interp.StdIO(os.Stdin, os.Stdout, os.Stderr),
61
76
interp.ExecHandlers(middleware),
62
77
interp.CallHandler(callHandler(reg, fsys, os.Stdout, os.Stderr)),