Eval stuff securely

[AlexDaniel]

Eval stuff securely

[MasterDuke17]

This could also solve the problem we've been having recently where a bot dies and leave the rakudo directory for the commit it was currently using lying around. This blocks any other bots from running with that commit. This is particularly problematic because a high percentage of the bot invocations use HEAD, so if the bot dies it could essentially prevent most use of the other bots.

[MasterDuke17]

A short term solution would be to add the name of the bot to the path it extracts into, then at least if it dies it won't block the other bots.

[AlexDaniel]

A short term solution would be to add the name of the bot to the path it extracts into, then at least if it dies it won't block the other bots.

That would mean building rakudo three times for each commit…

[MasterDuke17]

Ugh, right, forgot that paths are hard-coded when it's built.

[AlexDaniel]

To resolve this fully we'd need to set SystemCallFilter and some other things also. It will always be a balance between tightening the nuts and letting people run stuff freely, but right now we're a bit too forgiving.