added the ability to prohibit network access for code submissions executed using Docker

2015-03-17 17:14:25 +01:00
parent b1218e0b80
commit 15d8984a9e
12 changed files with 41 additions and 4 deletions
--- a/lib/docker_client.rb
+++ b/lib/docker_client.rb
@ -29,6 +29,7 @@ class DockerClient
    {
      'Image' => find_image_by_tag(execution_environment.docker_image).info['RepoTags'].first,
      'Memory' => execution_environment.memory_limit.megabytes,
+      'NetworkDisabled' => !execution_environment.network_enabled?,
      'OpenStdin' => true,
      'StdinOnce' => true
    }