1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
//go:build !windows && !freebsd
// +build !windows,!freebsd
package git
import (
"context"
"os/exec"
"runtime"
"syscall"
"time"
"golang.org/x/sys/unix"
)
func runWithStandardUmask(ctx context.Context, cmd *exec.Cmd) error {
errCh := make(chan error)
go func() {
defer close(errCh)
runtime.LockOSThread()
if err := unshareAndRun(ctx, cmd); err != nil {
errCh <- err
}
}()
return <-errCh
}
// unshareAndRun needs to be called in a locked thread.
func unshareAndRun(ctx context.Context, cmd *exec.Cmd) error {
if err := syscall.Unshare(syscall.CLONE_FS); err != nil {
return err
}
syscall.Umask(0022)
return runProcessGroup(ctx, cmd)
}
func runProcessGroup(ctx context.Context, cmd *exec.Cmd) error {
cmd.SysProcAttr = &unix.SysProcAttr{
Setpgid: true,
Pdeathsig: unix.SIGTERM,
}
if err := cmd.Start(); err != nil {
return err
}
waitDone := make(chan struct{})
go func() {
select {
case <-ctx.Done():
_ = unix.Kill(-cmd.Process.Pid, unix.SIGTERM)
go func() {
select {
case <-waitDone:
case <-time.After(10 * time.Second):
_ = unix.Kill(-cmd.Process.Pid, unix.SIGKILL)
}
}()
case <-waitDone:
}
}()
err := cmd.Wait()
close(waitDone)
return err
}
|
