mirror of
https://github.com/usestrix/strix.git
synced 2026-10-13 03:57:59 +00:00
b46fc2fb19
docker.from_env() ignores the current docker context, so Docker Desktop on macOS (socket under ~/.docker/run unless the default-socket option is on), OrbStack and Colima reported DOCKER NOT AVAILABLE while `docker ps` worked. Every failure also printed the same "ensure Docker Desktop is running" text followed by a RuntimeError traceback. - resolve the endpoint as the CLI does: DOCKER_HOST, then DOCKER_CONTEXT or the current context, then the default socket; the sandbox backend uses the same resolution so startup and scan talk to the same daemon - classify the SDK error (socket missing, permission denied, connection refused, Windows named pipe) and print the fix for the current platform, the endpoint that was tried and the underlying error - exit 1 cleanly instead of raising after the panel - telemetry reports docker_unavailable_<reason>
106 lines
3.5 KiB
Python
106 lines
3.5 KiB
Python
"""Sandbox backend registry — selected via STRIX_RUNTIME_BACKEND (default: docker)."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
from collections.abc import Awaitable, Callable
|
|
from typing import TYPE_CHECKING, Any
|
|
|
|
|
|
if TYPE_CHECKING:
|
|
from agents.sandbox.manifest import Manifest
|
|
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
SandboxBackend = Callable[..., Awaitable[tuple[Any, Any]]]
|
|
|
|
|
|
async def _docker_backend(
|
|
*,
|
|
image: str,
|
|
manifest: Manifest,
|
|
exposed_ports: tuple[int, ...],
|
|
bind_mounts: list[dict[str, Any]] | None = None,
|
|
) -> tuple[Any, Any]:
|
|
"""Bring up a session backed by the local Docker daemon.
|
|
|
|
Uses :class:`StrixDockerSandboxClient` to inject NET_ADMIN /
|
|
NET_RAW caps + ``host.docker.internal`` host-gateway, on the same
|
|
endpoint the startup check resolved (``DOCKER_HOST``, docker context,
|
|
default socket). Imports ``docker`` lazily so deployments that target
|
|
a non-Docker backend don't need the docker-py library installed.
|
|
|
|
``session.start()`` is what materializes the manifest into the running
|
|
container — the SDK's ``client.create()`` only builds the inner session
|
|
object without applying it. ``async with session:`` would call it too, but
|
|
Strix manages session lifetime explicitly via ``client.delete()`` so we
|
|
trigger ``start()`` ourselves.
|
|
"""
|
|
from agents.sandbox.sandboxes.docker import DockerSandboxClientOptions
|
|
|
|
from strix.runtime.docker_client import StrixDockerSandboxClient
|
|
from strix.runtime.docker_connection import connect_docker
|
|
|
|
client = StrixDockerSandboxClient(connect_docker())
|
|
client.strix_bind_mounts = bind_mounts or []
|
|
options = DockerSandboxClientOptions(image=image, exposed_ports=exposed_ports)
|
|
session = await client.create(options=options, manifest=manifest)
|
|
await session.start()
|
|
return client, session
|
|
|
|
|
|
_BACKENDS: dict[str, SandboxBackend] = {
|
|
"docker": _docker_backend,
|
|
}
|
|
|
|
_BIND_MOUNT_BACKENDS: set[str] = {"docker"}
|
|
|
|
|
|
def get_backend(name: str) -> SandboxBackend:
|
|
"""Return the backend factory for ``name`` or raise.
|
|
|
|
Args:
|
|
name: Backend identifier (e.g. ``"docker"``). Match is exact;
|
|
no fallback. Unknown values raise so config typos surface
|
|
immediately instead of silently picking a default.
|
|
"""
|
|
backend = _BACKENDS.get(name)
|
|
if backend is None:
|
|
supported = ", ".join(sorted(_BACKENDS))
|
|
raise ValueError(
|
|
f"Unknown STRIX_RUNTIME_BACKEND: {name!r} (supported: {supported})",
|
|
)
|
|
logger.debug("Selected sandbox backend: %s", name)
|
|
return backend
|
|
|
|
|
|
def register_backend(
|
|
name: str,
|
|
backend: SandboxBackend,
|
|
*,
|
|
supports_bind_mounts: bool = False,
|
|
) -> None:
|
|
"""Register a custom backend under ``name``.
|
|
|
|
Intended for downstream users who ship their own runtime — register
|
|
before any ``session_manager.create_or_reuse`` call. Re-registering
|
|
an existing name overwrites the prior entry. ``supports_bind_mounts``
|
|
defaults to False: a remote runtime cannot see the caller's filesystem, so
|
|
it is handed local sources as manifest entries to upload instead.
|
|
"""
|
|
_BACKENDS[name] = backend
|
|
if supports_bind_mounts:
|
|
_BIND_MOUNT_BACKENDS.add(name)
|
|
else:
|
|
_BIND_MOUNT_BACKENDS.discard(name)
|
|
logger.info("Registered sandbox backend: %s (bind mounts: %s)", name, supports_bind_mounts)
|
|
|
|
|
|
def backend_supports_bind_mounts(name: str) -> bool:
|
|
return name in _BIND_MOUNT_BACKENDS
|
|
|
|
|
|
def supported_backends() -> list[str]:
|
|
return sorted(_BACKENDS)
|