genuinetools/contained.af

A stupid game for learning about containers, capabilities, and syscalls.

contained.af's Issues

Console smiling

Hi, I was playing around with the container and I saw it smiling at me upon reset command:
(B/ #

Anyway, that's minor but I was wondering why this happen?

.terminal wider than #console

It looks like the div.terminal inside #console is wider than the #console.

In Chrome - http://imgur.com/a/AsQBb. It looks like the div#console is 1140x400, the div.terminal inside it is 1340x310

Less pronounced in Firefox: http://imgur.com/a/qCCQo - the div#console is 1140x400, the div.terminal is 1144x324.333.

Running Chrome 56.0.2924.87 and Firefox ESR 45.7.0 on Debian amd64.

If I have time this weekend I'll take a quick look at the CSS...

About binctr

Sorry to open an issue about binctr here.
I am trying to use binctr but I get this error.

`make static
docker pull --disable-content-trust=false alpine
Using default tag: latest
Pull (1 of 1): alpine:latest@sha256:3dcdb92d7432d56604d4545cbd324b14e647b313626d99b889d0626de158f73a
sha256:3dcdb92d7432d56604d4545cbd324b14e647b313626d99b889d0626de158f73a: Pulling from library/alpine
Digest: sha256:3dcdb92d7432d56604d4545cbd324b14e647b313626d99b889d0626de158f73a
Status: Image is up to date for alpine@sha256:3dcdb92d7432d56604d4545cbd324b14e647b313626d99b889d0626de158f73a
Tagging alpine@sha256:3dcdb92d7432d56604d4545cbd324b14e647b313626d99b889d0626de158f73a as alpine:latest
docker export 10f5b1ea95ff5a0196be67a60c425d5642366897efe9c428b3b4aef42918401d > image.tar
GOMAXPROCS=1 go generate

• static
  CGO_ENABLED=1 go build -tags "seccomp apparmor cgo static_build"
  -ldflags "-w -extldflags -static -X main.GITCOMMIT=e2b7baf-dirty -X main.VERSION=0.1.0 -X main.IMAGE=alpine -X main.IMAGESHA=sha256:4e38e38c8ce0b8d9041a9c4fefe786631d1416225e13b0bfe8cfa2321aec4bba" -o bin/alpine .

  _/home/oneadmin/s6/binctr

  ./spec.go:146: cannot use specs.Linux literal (type specs.Linux) as type specs.Linux in field value
  make: ** [static] Error 2`

I appreciate if you could help me to solve it.

Nginx config not included in repo

In prod, contained.af seems to be fronted by nginx (there's server: nginx in the response header).

In the interest of replicating a prod deployment as close as possible, I would find it useful if the nginx config was public or ideally locally reproducible modulo the Lets Encrypt cert.

Is the nanosleep syscall blocked?

This section asks if the nanosleep sycall is being blocked. Sleep can be run without any error messages (example sleep 5s, sleep 30s, ....etc...) That shows that sleep is able to be run, so nanosleep isn't being blocked, however, if I answer "No" to that question it responds with "try to run sleep" indicating the answers wrong. Might want to check that code, sleep is runnable therefore nanosleep isn't blocked.

xterm weirdness on Android Chrome

Per @raggi, the console behaves strangely on Android Chrome. https://photos.google.com/share/AF1QipNiK_IQM4HrtI5_9uzfJmkC1-8-tYJs4BlilVm-3M2PoRud3YoJ2umWvKE3yQ45Ig?key=YzhoeWg1c1UwZXVyaUQ3QWNiOC1yX1N2YWlSNl9B

I suspect it's probably a bug upstream in https://github.com/sourcelair/xterm.js, will investigate...

Add more questions

`nanosleep(2)` is not blocked

The answers expect the nanosleep(2) syscall to be blocked, but it isn't (and the sleep command can successfully be used).

dmesg not blocked

I can't open kmsg but...I can 'dmesg' and see host kernel info?

No console, however error in Dev Tools Console.

contained.min.js:5 WebSocket is already in CLOSING or CLOSED state.

javascript errors

I'm not sure what triggers these errors. It normally takes a little bit for them to pop up. Running Chrome 57 on Windows

contained.min.js:3 Uncaught TypeError: Failed to execute 'getComputedStyle' on 'Window': parameter 1 is not of type 'Element'.
    at Object.t.proposeGeometry (contained.min.js:3)
    at Object.t.fit (contained.min.js:3)
    at r.e.fit (contained.min.js:3)
    at t (contained.min.js:5)
    at window.onresize (contained.min.js:5)

turn on networking so people can do whatever they want

contained.af terminal never connects

The contained.af terminal does not connect. Looking at developer tools the wss://contained.af/term never returns any message.

Trying to run contained.af locally on Linux Mint results in "Error response from daemon"

Full error message
docker: Error response from daemon: cannot join network of a non running container: contained-dind.

Steps to reproduce

1. Clone contained.af repo
2. run make dev and make dind. Successful. Run make run errors out with above error message.
3. Checked docker ps, contained-dind is not running.

I should add, that I'm a total n00b so I'm going to duckduckgo a bit to see if I can make it work.

Page jump to top on keypress or click

This happen on windows 7 chrome when you click on the terminal or press a key it jump to the top, it's realy annoying on smaller screen (1330x768 laptop) because you can't see the commad line and you need to scroll down.

502 error on https://contained.af

Good evening, seems like something went wrong on https://contained.af

terminal error

Hi. I'm getting the following in the logs:
DEBU[0309] received from container websocket: standard_init_linux.go:190: exec user process caused "permission denied"
Every time I reload the page I see that error, "standard_initlinux.go:190..." flash in the terminal box on the page and in the log stream. I'm guessing that this is related to connecting a shell to the terminal window. Any hint on how to debug this would be appreciated. All the other functionality, AFAIK, works fine. This is on ubuntu.
I have minimal docker/container knowledge so I may be doing something obviously wrong.

hints

ping @marcosnils

right now hints are part of the "warning" https://github.com/jfrazelle/contained.af/blob/master/static/js/questions.js#L5 when they guess wrong but maybe we should have a tooltip or something.... I suck at javascript

terminal output

So far Im trying to solve the game but at some point I cannot see the terminal any longer and start seeing these messages on chrome console.

Uncaught TypeError: Failed to execute 'getComputedStyle' on 'Window': parameter 1 is not of type 'Element'. at Object.proposeGeometry (contained.min.js:1) at Object.fit (contained.min.js:1) at g.e.fit (contained.min.js:1) at t (contained.min.js:1) at window.onresize (contained.min.js:1) 12contained.min.js:1

old kernel leaks host mount info into container

I was surprised to see in the container:

/ # mount                                                                       
overlay on / type overlay (rw,relatime,lowerdir=/var/lib/docker/165536.165536/overlay/0ba9b7615cd55505fdada24721eb7bb499
16f7ad052b8dac03eaf18a7e358a5a/root,upperdir=/var/lib/docker/165536.165536/overlay/c709c965bb44392aec185327bc480e53dc125
20f2dd02b56fd351ce033344a1e/upper,workdir=/var/lib/docker/165536.165536/overlay/c709c965bb44392aec185327bc480e53dc12520f
2dd02b56fd351ce033344a1e/work)  
.
.
.

I think kernel commit a082c6f680da2 in 4.12 or newer might block this and maybe a 4.4 kernel is currently running?