Is there a way to disable sandboxing in OpenDevin ?

[aelbarkani]

Hi !
We execute opendevin in a container with restricted permissions (OpenShift cluster), and actually we don't think the sandboxing feature is useful in this specific case (actually it breaks OpenShift security). Is there a way to disable sandboxing ? If not and if it is something you would be interested in, we can implement it if you tell us where to do so :)

[enyst]

Hi @aelbarkani ! I'm not sure what is suitable for OpenShift, but we are interested in and worked on the architecture that would hopefully allow us to adapt relatively smoothly for a new platform. If it doesn't work for you yet as it is, we definitely welcome PRs to fix it if support for this platform needs it.

As a first pointer, which is kind of a sandbox that doesn't do sandboxing, please take a look at LocalBox, in https://github.com/OpenDevin/OpenDevin/blob/main/opendevin/runtime/docker/local_box.py

Does it fit the purpose? Would you need to modify it to suit the purpose?

Or perhaps take a look in that directory, at all sandboxes we currently have, and check if you would like to define another for this use. Also, you may want to take a look at how the runtime works with a sandbox (even a "fake" one): https://github.com/OpenDevin/OpenDevin/blob/main/opendevin/runtime/runtime.py

[aelbarkani]

Awesome ! I think the LocalBox is enough, will give it a try and let you know how it goes !

[aelbarkani]

@enyst hey from version 0.9.0 there is no LocalBox anymore it seems, which breaks our whole setup. Is there a replacement for it ?

[enyst]

Just for the record, for other people reading this, the issue is discussed here: #3903