Skip to content

Commit 7ded3f7

Browse files
committed
remove queues entirely, they're not really needed
1 parent 6ee1988 commit 7ded3f7

9 files changed

Lines changed: 8 additions & 247 deletions

File tree

.github/workflows/c-tests.yml

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,6 @@ jobs:
2626
sudo apt-get install -y gcc libc6-dev
2727
2828
- name: Run filesystem isolation subtest
29-
env:
30-
ENABLE_QUEUE: "false"
3129
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^file privacy across request IDs$' ./...
3230

3331
test-disk-cleanup:
@@ -49,8 +47,6 @@ jobs:
4947
sudo apt-get install -y gcc libc6-dev
5048
5149
- name: Run disk cleanup subtest
52-
env:
53-
ENABLE_QUEUE: "false"
5450
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^disk spammer is terminated and data is reclaimed$' ./...
5551

5652
test-fork-bomb:
@@ -72,8 +68,6 @@ jobs:
7268
sudo apt-get install -y gcc libc6-dev
7369
7470
- name: Run fork bomb subtest
75-
env:
76-
ENABLE_QUEUE: "false"
7771
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^fork bomb does not poison subsequent requests$' ./...
7872

7973
test-network-isolation:
@@ -95,8 +89,6 @@ jobs:
9589
sudo apt-get install -y gcc libc6-dev
9690
9791
- name: Run network isolation subtest
98-
env:
99-
ENABLE_QUEUE: "false"
10092
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^network namespace blocks localhost bridge$' ./...
10193

10294
test-memory-oom:
@@ -118,8 +110,6 @@ jobs:
118110
sudo apt-get install -y gcc libc6-dev
119111
120112
- name: Run memory OOM subtest
121-
env:
122-
ENABLE_QUEUE: "false"
123113
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^memory hard limit triggers oom kill$' ./...
124114

125115
test-io-flood:
@@ -141,8 +131,6 @@ jobs:
141131
sudo apt-get install -y gcc libc6-dev
142132
143133
- name: Run I/O flood resilience subtest
144-
env:
145-
ENABLE_QUEUE: "false"
146134
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^io flood is bounded and returns before timeout$' ./...
147135

148136
test-signal-trap:
@@ -164,8 +152,6 @@ jobs:
164152
sudo apt-get install -y gcc libc6-dev
165153
166154
- name: Run signal trap resilience subtest
167-
env:
168-
ENABLE_QUEUE: "false"
169155
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^signal trap cannot survive forced timeout$' ./...
170156

171157
test-orphan-reaping:
@@ -187,8 +173,6 @@ jobs:
187173
sudo apt-get install -y gcc libc6-dev
188174
189175
- name: Run orphan reaping resilience subtest
190-
env:
191-
ENABLE_QUEUE: "false"
192176
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^orphan grandchild is reaped after request exits$' ./...
193177

194178
test-inode-exhaustion:
@@ -210,8 +194,6 @@ jobs:
210194
sudo apt-get install -y gcc libc6-dev
211195
212196
- name: Run inode exhaustion resilience subtest
213-
env:
214-
ENABLE_QUEUE: "false"
215197
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^inode bomb does not poison host temp filesystem$' ./...
216198

217199
test-privileged-syscall:
@@ -233,6 +215,4 @@ jobs:
233215
sudo apt-get install -y gcc libc6-dev
234216
235217
- name: Run privileged syscall denial subtest
236-
env:
237-
ENABLE_QUEUE: "false"
238218
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^privileged reboot syscall is denied$' ./...

.github/workflows/cpp-tests.yml

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,6 @@ jobs:
2626
sudo apt-get install -y gcc g++ libc6-dev
2727
2828
- name: Run filesystem isolation subtest
29-
env:
30-
ENABLE_QUEUE: "false"
3129
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^file privacy across request IDs$' ./...
3230

3331
test-disk-cleanup:
@@ -49,8 +47,6 @@ jobs:
4947
sudo apt-get install -y gcc g++ libc6-dev
5048
5149
- name: Run disk cleanup subtest
52-
env:
53-
ENABLE_QUEUE: "false"
5450
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^disk spammer is terminated and data is reclaimed$' ./...
5551

5652
test-fork-bomb:
@@ -72,8 +68,6 @@ jobs:
7268
sudo apt-get install -y gcc g++ libc6-dev
7369
7470
- name: Run fork bomb subtest
75-
env:
76-
ENABLE_QUEUE: "false"
7771
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^fork bomb does not poison subsequent requests$' ./...
7872

7973
test-network-isolation:
@@ -95,8 +89,6 @@ jobs:
9589
sudo apt-get install -y gcc g++ libc6-dev
9690
9791
- name: Run network isolation subtest
98-
env:
99-
ENABLE_QUEUE: "false"
10092
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^network namespace blocks localhost bridge$' ./...
10193

10294
test-memory-oom:
@@ -118,8 +110,6 @@ jobs:
118110
sudo apt-get install -y gcc g++ libc6-dev
119111
120112
- name: Run memory OOM subtest
121-
env:
122-
ENABLE_QUEUE: "false"
123113
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^memory hard limit triggers oom kill$' ./...
124114

125115
test-io-flood:
@@ -141,8 +131,6 @@ jobs:
141131
sudo apt-get install -y gcc g++ libc6-dev
142132
143133
- name: Run I/O flood resilience subtest
144-
env:
145-
ENABLE_QUEUE: "false"
146134
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^io flood is bounded and returns before timeout$' ./...
147135

148136
test-signal-trap:
@@ -164,8 +152,6 @@ jobs:
164152
sudo apt-get install -y gcc g++ libc6-dev
165153
166154
- name: Run signal trap resilience subtest
167-
env:
168-
ENABLE_QUEUE: "false"
169155
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^signal trap cannot survive forced timeout$' ./...
170156

171157
test-orphan-reaping:
@@ -187,8 +173,6 @@ jobs:
187173
sudo apt-get install -y gcc g++ libc6-dev
188174
189175
- name: Run orphan reaping resilience subtest
190-
env:
191-
ENABLE_QUEUE: "false"
192176
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^orphan grandchild is reaped after request exits$' ./...
193177

194178
test-inode-exhaustion:
@@ -210,8 +194,6 @@ jobs:
210194
sudo apt-get install -y gcc g++ libc6-dev
211195
212196
- name: Run inode exhaustion resilience subtest
213-
env:
214-
ENABLE_QUEUE: "false"
215197
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^inode bomb does not poison host temp filesystem$' ./...
216198

217199
test-privileged-syscall:
@@ -233,6 +215,4 @@ jobs:
233215
sudo apt-get install -y gcc g++ libc6-dev
234216
235217
- name: Run privileged syscall denial subtest
236-
env:
237-
ENABLE_QUEUE: "false"
238218
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$/^privileged reboot syscall is denied$' ./...

.github/workflows/java-tests.yml

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,6 @@ jobs:
2626
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
2727
2828
- name: Run filesystem isolation subtest
29-
env:
30-
ENABLE_QUEUE: "false"
3129
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^file privacy across request IDs$' ./...
3230

3331
test-disk-cleanup:
@@ -49,8 +47,6 @@ jobs:
4947
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
5048
5149
- name: Run disk cleanup subtest
52-
env:
53-
ENABLE_QUEUE: "false"
5450
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^disk spammer is terminated and data is reclaimed$' ./...
5551

5652
test-fork-bomb:
@@ -72,8 +68,6 @@ jobs:
7268
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
7369
7470
- name: Run fork bomb subtest
75-
env:
76-
ENABLE_QUEUE: "false"
7771
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^fork bomb does not poison subsequent requests$' ./...
7872

7973
test-network-isolation:
@@ -95,8 +89,6 @@ jobs:
9589
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
9690
9791
- name: Run network isolation subtest
98-
env:
99-
ENABLE_QUEUE: "false"
10092
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^network namespace blocks localhost bridge$' ./...
10193

10294
test-memory-oom:
@@ -118,8 +110,6 @@ jobs:
118110
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
119111
120112
- name: Run memory OOM subtest
121-
env:
122-
ENABLE_QUEUE: "false"
123113
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^memory hard limit triggers oom kill$' ./...
124114

125115
test-io-flood:
@@ -141,8 +131,6 @@ jobs:
141131
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
142132
143133
- name: Run I/O flood resilience subtest
144-
env:
145-
ENABLE_QUEUE: "false"
146134
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^io flood is bounded and returns before timeout$' ./...
147135

148136
test-signal-trap:
@@ -164,8 +152,6 @@ jobs:
164152
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
165153
166154
- name: Run signal trap resilience subtest
167-
env:
168-
ENABLE_QUEUE: "false"
169155
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^signal trap cannot survive forced timeout$' ./...
170156

171157
test-orphan-reaping:
@@ -187,8 +173,6 @@ jobs:
187173
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
188174
189175
- name: Run orphan reaping resilience subtest
190-
env:
191-
ENABLE_QUEUE: "false"
192176
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^orphan grandchild is reaped after request exits$' ./...
193177

194178
test-inode-exhaustion:
@@ -210,8 +194,6 @@ jobs:
210194
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
211195
212196
- name: Run inode exhaustion resilience subtest
213-
env:
214-
ENABLE_QUEUE: "false"
215197
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^inode bomb does not poison host temp filesystem$' ./...
216198

217199
test-privileged-syscall:
@@ -233,6 +215,4 @@ jobs:
233215
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
234216
235217
- name: Run privileged syscall denial subtest
236-
env:
237-
ENABLE_QUEUE: "false"
238218
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$/^privileged reboot syscall is denied$' ./...

.github/workflows/python3-tests.yml

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,6 @@ jobs:
2626
sudo apt-get install -y gcc libc6-dev python3
2727
2828
- name: Run filesystem isolation subtest
29-
env:
30-
ENABLE_QUEUE: "false"
3129
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^file privacy across request IDs$' ./...
3230

3331
test-disk-cleanup:
@@ -49,8 +47,6 @@ jobs:
4947
sudo apt-get install -y gcc libc6-dev python3
5048
5149
- name: Run disk cleanup subtest
52-
env:
53-
ENABLE_QUEUE: "false"
5450
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^disk spammer is terminated and data is reclaimed$' ./...
5551

5652
test-fork-bomb:
@@ -72,8 +68,6 @@ jobs:
7268
sudo apt-get install -y gcc libc6-dev python3
7369
7470
- name: Run fork bomb subtest
75-
env:
76-
ENABLE_QUEUE: "false"
7771
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^fork bomb does not poison subsequent requests$' ./...
7872

7973
test-network-isolation:
@@ -95,8 +89,6 @@ jobs:
9589
sudo apt-get install -y gcc libc6-dev python3
9690
9791
- name: Run network isolation subtest
98-
env:
99-
ENABLE_QUEUE: "false"
10092
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^network namespace blocks localhost bridge$' ./...
10193

10294
test-memory-oom:
@@ -118,8 +110,6 @@ jobs:
118110
sudo apt-get install -y gcc libc6-dev python3
119111
120112
- name: Run memory OOM subtest
121-
env:
122-
ENABLE_QUEUE: "false"
123113
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^memory hard limit triggers oom kill$' ./...
124114

125115
test-io-flood:
@@ -141,8 +131,6 @@ jobs:
141131
sudo apt-get install -y gcc libc6-dev python3
142132
143133
- name: Run I/O flood resilience subtest
144-
env:
145-
ENABLE_QUEUE: "false"
146134
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^io flood is bounded and returns before timeout$' ./...
147135

148136
test-signal-trap:
@@ -164,8 +152,6 @@ jobs:
164152
sudo apt-get install -y gcc libc6-dev python3
165153
166154
- name: Run signal trap resilience subtest
167-
env:
168-
ENABLE_QUEUE: "false"
169155
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^signal trap cannot survive forced timeout$' ./...
170156

171157
test-orphan-reaping:
@@ -187,8 +173,6 @@ jobs:
187173
sudo apt-get install -y gcc libc6-dev python3
188174
189175
- name: Run orphan reaping resilience subtest
190-
env:
191-
ENABLE_QUEUE: "false"
192176
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^orphan grandchild is reaped after request exits$' ./...
193177

194178
test-inode-exhaustion:
@@ -210,8 +194,6 @@ jobs:
210194
sudo apt-get install -y gcc libc6-dev python3
211195
212196
- name: Run inode exhaustion resilience subtest
213-
env:
214-
ENABLE_QUEUE: "false"
215197
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^inode bomb does not poison host temp filesystem$' ./...
216198

217199
test-privileged-syscall:
@@ -233,6 +215,4 @@ jobs:
233215
sudo apt-get install -y gcc libc6-dev python3
234216
235217
- name: Run privileged syscall denial subtest
236-
env:
237-
ENABLE_QUEUE: "false"
238218
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$/^privileged reboot syscall is denied$' ./...

.github/workflows/queue-tests.yml

Lines changed: 0 additions & 26 deletions
This file was deleted.

README.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -379,12 +379,8 @@ curl --location 'https://codeapi.anga.codes/v2/execute' \
379379
- same format as `MAX_MEMORY_LIMIT`
380380
- default value is `1048576` or `1 GB`
381381
- public version of this API sets this to `6 GB`
382-
- `ENABLE_QUEUE`: if false, the server will reject requests when ram limit is reached, if true, the server will queue requests until sufficient ram is available
383-
- this can only be set to `true` or `false`
384-
- by default this is `true`
385-
- the publically deployed API has this set to `true`
386382
- `ENABLE_DEBUG`: if true, the server will expose debug routes (like `/check-ram`) for monitoring and debugging purposes
387-
- same format as `ENABLE_QUEUE`
383+
- this can only be set to `true` or `false`
388384
- by default this is `false`
389385
- the public API has this set to `true`
390386
- `GIN_MODE`: whether to run the gin-gonic server in release mode or debug mode. For this API there won't be much of a performance difference regardless of which one you pick, and it is recommended that you read the docs for [gin-gonic](https://gin-gonic.com/en/docs/deployment/#configuration-options) for more information

0 commit comments

Comments
 (0)