Set default isolation settings to env maximums

src/isolate.rs

@@ -9,6 +9,8 @@ use std::process::Command;
 use std::process::ExitStatus;
 use std::{collections::HashMap, process::Stdio};
 
+use crate::utils;
+
 #[derive(Debug)]
 pub struct ExecutedCommandResult {
     pub status: ExitStatus,
@@ -137,25 +139,25 @@ pub struct IsolatedBoxOptions {
     #[builder(default = "false")]
     pub profiling: bool,
 
-    #[builder(default = "5")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_RUN_TIME_LIMIT\", 5)")]
     pub run_time_limit: u64,
 
-    #[builder(default = "0")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_EXTRA_TIME_LIMIT\", 0)")]
     pub extra_time_limit: u64,
 
-    #[builder(default = "10")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_WALL_TIME_LIMIT\", 10)")]
     pub wall_time_limit: u64,
 
-    #[builder(default = "128000")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_STACK_SIZE_LIMIT\", 128000)")]
     pub stack_size_limit: u64,
 
-    #[builder(default = "120")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_PROCESS_COUNT_LIMIT\", 120)")]
     pub process_count_limit: u64,
 
-    #[builder(default = "512000")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_MEMORY_LIMIT\", 512000)")]
     pub memory_limit: u64,
 
-    #[builder(default = "10240")]
+    #[builder(default = "utils::parsed_env::get(\"MAX_STORAGE_LIMIT\", 10240)")]
     pub storage_limit: u64,
 }
 

src/main.rs

@@ -9,6 +9,7 @@ extern crate derive_more;
 #[macro_use]
 extern crate derive_builder;
 
+mod utils;
 mod api_helpers;
 mod isolate;
 mod routes;

src/routes/run_post.rs

@@ -2,6 +2,7 @@ use crate::api_helpers::{ApiError, ApiResult};
 use crate::runner::phase_settings::{PhaseSandboxSettings, PhaseSettings};
 use crate::runner::runner::Runner;
 use crate::runner::runner::RunnerPhaseResult;
+use crate::utils;
 use actix_web::{post, web::Json};
 use merge::Merge;
 use serde::{Deserialize, Serialize};
@@ -27,27 +28,7 @@ pub struct RunResponseDTO {
 
 fn is_over_cap_limit_env(current_option: Option<u64>, name: &str) -> bool {
     match current_option {
-        Some(current) => {
-            let max = match env::var(name) {
-                Ok(value) => match value.as_str() {
-                    "-1" => u64::MAX,
-                    _ => match value.parse() {
-                        Ok(max) => max,
-                        Err(e) => {
-                            eprintln!(
-                                "Failed to parse environment variable '{}' as an `u64`: {}",
-                                name, e
-                            );
-
-                            u64::MAX
-                        }
-                    },
-                },
-                Err(_) => u64::MAX,
-            };
-
-            current > max
-        }
+        Some(current) => current > utils::parsed_env::get(name, u64::MAX),
         None => false,
     }
 }

src/utils/mod.rs

@@ -0,0 +1 @@
+pub mod parsed_env;

src/utils/parsed_env.rs

@@ -0,0 +1,26 @@
+use std::env;
+
+pub fn get<S>(name: S, default: u64) -> u64
+where
+    S: Into<String>,
+{
+    let name_string = name.into();
+
+    match env::var(name_string.clone()) {
+        Ok(value) => match value.as_str() {
+            "-1" => default,
+            _ => match value.parse() {
+                Ok(max) => max,
+                Err(e) => {
+                    eprintln!(
+                        "Failed to parse environment variable '{}' as an `u64`: {}",
+                        name_string, e
+                    );
+
+                    default
+                }
+            },
+        },
+        Err(_) => default,
+    }
+}