summaryrefslogtreecommitdiffstats
path: root/plugin/rpcplugin/sandbox/supervisor.go
blob: 0e63954fd8d5668f98f11c614ece97f96ae12192 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
// See License.txt for license information.

package sandbox

import (
	"context"
	"fmt"
	"io"
	"path/filepath"
	"strings"

	"github.com/mattermost/mattermost-server/model"
	"github.com/mattermost/mattermost-server/plugin"
	"github.com/mattermost/mattermost-server/plugin/rpcplugin"
)

func SupervisorProvider(bundle *model.BundleInfo) (plugin.Supervisor, error) {
	return rpcplugin.SupervisorWithNewProcessFunc(bundle, func(ctx context.Context) (rpcplugin.Process, io.ReadWriteCloser, error) {
		executable := filepath.Clean(filepath.Join(".", bundle.Manifest.Backend.Executable))
		if strings.HasPrefix(executable, "..") {
			return nil, nil, fmt.Errorf("invalid backend executable")
		}
		return NewProcess(ctx, &Configuration{
			MountPoints: []*MountPoint{{
				Source:      bundle.Path,
				Destination: "/plugin",
				ReadOnly:    true,
			}},
			WorkingDirectory: "/plugin",
		}, filepath.Join("/plugin", executable))
	})
}