run.py

#!/usr/bin/env python3
# Part of this file is lifted from the original judger repository.
# GeekPie and/or its affiliated parties does not claim ownership not any
# copyright over these material.
from pathlib import Path
import json
import subprocess
from sys import argv

UNLIMITED = -1
VERSION = 0x020101

RESULT_SUCCESS = 0
RESULT_CPU_TIME_LIMIT_EXCEEDED = 1
RESULT_REAL_TIME_LIMIT_EXCEEDED = 2
RESULT_MEMORY_LIMIT_EXCEEDED = 3
RESULT_RUNTIME_ERROR = 4
RESULT_SYSTEM_ERROR = 5

ERROR_INVALID_CONFIG = -1
ERROR_FORK_FAILED = -2
ERROR_PTHREAD_FAILED = -3
ERROR_WAIT_FAILED = -4
ERROR_ROOT_REQUIRED = -5
ERROR_LOAD_SECCOMP_FAILED = -6
ERROR_SETRLIMIT_FAILED = -7
ERROR_DUP2_FAILED = -8
ERROR_SETUID_FAILED = -9
ERROR_EXECVE_FAILED = -10
ERROR_SPJ_ERROR = -11


def run(max_cpu_time,
		max_real_time,
		max_memory,
		max_stack,
		max_output_size,
		max_process_number,
		exe_path,
		input_path,
		output_path,
		error_path,
		args,
		env,
		log_path,
		seccomp_rule_name,
		uid,
		gid,
		memory_limit_check_only=0):
	str_list_vars = ["args", "env"]
	int_vars = ["max_cpu_time", "max_real_time",
				"max_memory", "max_stack", "max_output_size",
				"max_process_number", "uid", "gid", "memory_limit_check_only"]
	str_vars = ["exe_path", "input_path", "output_path", "error_path", "log_path"]

	proc_args = ["/usr/lib/judger/libjudger.so"]

	for var in str_list_vars:
		value = vars()[var]
		if not isinstance(value, list):
			raise ValueError("{} must be a list".format(var))
		for item in value:
			if not isinstance(item, str):
				raise ValueError("{} item must be a string".format(var))
			proc_args.append("--{}={}".format(var, item))

	for var in int_vars:
		value = vars()[var]
		if not isinstance(value, int):
			raise ValueError("{} must be a int".format(var))
		if value != UNLIMITED:
			proc_args.append("--{}={}".format(var, value))

	for var in str_vars:
		value = vars()[var]
		if not isinstance(value, str):
			raise ValueError("{} must be a string".format(var))
		proc_args.append("--{}={}".format(var, value))

	if not isinstance(seccomp_rule_name, str) and seccomp_rule_name is not None:
		raise ValueError("seccomp_rule_name must be a string or None")
	if seccomp_rule_name:
		proc_args.append("--seccomp_rule={}".format(seccomp_rule_name))
	
	ret = subprocess.run(proc_args)
	return ret.returncode
	#return json.loads(out.decode("utf-8")), 0

def mb(count):
	return count * 1024 * 1024

def sec(ms):
	return int(ms) * 1000

err = run(
	sec(argv[4]),			# CPU time
	sec(argv[5]),			# real time
	mb(int(argv[6])),		# mem
	mb(16),				# 16 MB stack
	mb(16),				# 16MB output max
	UNLIMITED,			# does not limit process count
	"/executable",			# the compiled binary
	argv[1],			# STDIN - normally you won't want this to go public
	# "/dev/null",			# If you have no input, uncomment this line
	argv[2],			# STDOUT - normally you won't want this to go public
	argv[3],			# STDERR, discarded
	[],				# argv
	[],				# env
	"/dev/stdout",			# judger log path - have it print to container console
	"c_cpp", 			# or general. predefined, seccomp profile
	                                # or c_cpp_with_io, if you want to open files by name.
	                                # by using c_cpp_with_io, you affirm that you understood that student
	                                # could tamper with your grading script if you are not careful
	                                # Still, students normally can only read/write within /test. Be on your guard.
	1000,				# setuid 1000
	1000, 				# setgid 1000
	1				# does not use rlimit to limit mem used as it could cause crashes
)

if err < 0:
	exit(100-err)
else:
	exit(err)