Sandbox build pipeline by using docker

cargo-bins / cargo-quickinstall

pre-compiled binary packages for `cargo install`

Apache License 2.0

213 stars 9 forks source link

Open NobodyXu opened 1 month ago

NobodyXu commented 1 month ago

While docker isn't exactly safe, it is a good start.

We could then use fieecracker/gVisor to further sandbox the build.

Lastly, we could use RUSTC_WRAPPER to run each rustc invocation in a separate container.