run_code as a user instead of root

[mishushakov]

• Jupyter Server and Code Interpreter are started as a non-privileged user
• Adds ability to change user by creating a new context
• BREAKING: Default user root > user to match the Sandbox commands.run behavior
• POSSIBLY BREAKING: when cwd is not set and user is root, it will set cwd to /root

Sample code

const ctx = await sbx.createCodeContext({ language: "python", user: "user" })

const code = await sbx.runCode(`import getpass; print(getpass.getuser())`, { context })
console.log(code.logs);

{
    stdout: [ "user\n" ],
    stderr: [],
}

[linear]

E2B-2123 Permissions: calling `run_code` as a different user

[jakubno]

This won't be probably backwards compatible right?

Can I specify if I want run something as root?

[jakubno]

I think we just need to be able to pass user. Otherwise, someone might need to run something as root, leading to the same issue.

[jakubno]

why are you doing it as last thing? If you would set the user as a first thing you probably don't need change the ownership

[mishushakov]

the problem here is: "user" does not exist in python image
and we cannot add user before we have "sudo" dependency installed

so this is why it's the last

[mishushakov]

I created a new template, code-interpreter-v1beta1

[mishushakov]

one thing: this is a breaking change, should I put a script in /root/.jupyter/start-up.sh that just calls the actual start-up.sh with sudo -u user?