Repository navigation

[ML] Add Sandbox2 security integration for PyTorch inference - #2873

Closed

valeriy42 wants to merge 93 commits into

elastic:mainfrom

valeriy42:enhancement/sandbox2

Closed

[ML] Add Sandbox2 security integration for PyTorch inference#2873
valeriy42 wants to merge 93 commits into
elastic:mainfrom
valeriy42:enhancement/sandbox2

Commits on Oct 28, 2025
- sandbox2 and deps licenses
  valeriy42
  committed
  311ad21
- build integration
  valeriy42
  committed
  7382f3b
- Enhance Sandbox2 integration tests and policy handling
  valeriy42
  committed
  2c5775e
- Refactor Sandbox2 handling in CDetachedProcessSpawner_Linux
  valeriy42
  committed
  9b8da0f
- Implement Sandbox2 syscall policy for ML processes
  valeriy42
  committed
  ac67539
Commits on Nov 5, 2025
- formatting
  valeriy42
  committed
  b43e999
- fix header
  valeriy42
  committed
  5cd22f9
Commits on Nov 6, 2025
- sandbox2 library correctly linked
  valeriy42
  committed
  5c5a2a0
- Refactor Sandbox2 policy handling in unit tests
  valeriy42
  committed
  0fe86f5
- test 1 passes without sandbox2
  valeriy42
  committed
  9dadd42
- benign model passes. policy very permissive.
  valeriy42
  committed
  404c6b5
- evil model generator
  valeriy42
  committed
  878fadf
- restrict policies.
  valeriy42
  committed
  d4adb62
- Refactor syscall definitions in CDetachedProcessSpawner_Linux
  valeriy42
  committed
  d60ba2f
- formatting
  valeriy42
  committed
  fbc3c00
- changelog
  valeriy42
  committed
  9d5d2ba
- patch SAPI cmake file to make Python3 dependency optional
  valeriy42
  committed
  7506aab
- Merge branch 'enhancement/sandbox2' of https://github.com/valeriy42/ml-cpp into enhancement/sandbox2
  valeriy42
  committed
  6f49269
Commits on Nov 7, 2025
- fix python checks on CI
  valeriy42
  committed
  ac26ca6
- Remove Sandbox2 security tests and add CDetachedProcessSpawner tests for Linux
  valeriy42
  committed
  ec5cde2
Commits on Nov 20, 2025
- Add syscall allowance for prlimit64 in sandbox policy
  valeriy42
  committed
  03b1ee4
Commits on Nov 21, 2025
- formatting
  valeriy42
  committed
  b93dfec
- adjust for arm64
  valeriy42
  committed
  0594140
Commits on Nov 27, 2025
- python integration test simulation works
  valeriy42
  committed
  c77ebb6
Commits on Dec 9, 2025
- java IT works again
  valeriy42
  committed
  fa8f99d
- formatting
  valeriy42
  committed
  8dc9905
- Fix CI build failures
  valeriy42
  committed
  d853920
Commits on Jul 17, 2026
Commits on Jul 18, 2026
Commits on Jul 19, 2026
- [ML] Fix Sandbox2 spawner allowlist, PID tracking, and termination logging
  valeriy42
  committed
  0a56df5
Commits on Jul 21, 2026
- [ML] Allow glibc futex ops needed for concurrent pytorch_inference
  
  valeriy42
  authored and
  valeriy
  committed
  d9a856d
- [ML] Disarm Sandbox2 wall-time/CPU limits for the long-lived pytorch_inference daemon
  
  valeriy42
  authored and
  valeriy
  committed
  569f8cc
- [ML] Fix clang-format violations in Sandbox2 spawner and test
  
  valeriy42
  authored and
  valeriy
  committed
  0d89fc4
- formatting
  valeriy42
  committed
  facd362
Commits on Jul 22, 2026
- [ML] Fix Sandbox2 spawner tracking, seccomp gate, and attack tests
  valeriy42
  committed
  39940cb
- formatting
  valeriy42
  committed
  ff0349c
- [ML] Remove Sandbox2 attack-defense test from Docker CI
  valeriy42
  committed
  339d3f5
- [ML] Harden Sandbox2 spawner after code review follow-ups
  valeriy42
  committed
  69dea1b
Commits on Jul 23, 2026
- [ML] Improve Sandbox2 production observability and logging
  valeriy42
  committed
  786cdeb
- [ML] Honour --disableSandbox kill switch in pytorch_inference spawner
  valeriy42
  committed
  ef21959
- [ML] Correct Main.cc comment about pytorch_inference sandbox routing
  valeriy42
  committed
  63d8850
- [ML] Strip --disableSandbox on non-Linux spawners
  valeriy42
  committed
  634182f
- [ML] Point Sandbox2 startup failures at sandbox_enabled kill switch
  valeriy42
  committed
  f153159
- formatting
  valeriy42
  committed
  7c9623c
Commits on Jul 27, 2026
- [ML] Fix unit test failures from spawn failure reason and seccomp test pairing
  valeriy42
  committed
  6fcdecd
Commits on Jul 28, 2026
- Merge branch 'main' of https://github.com/elastic/ml-cpp into enhancement/sandbox2
  valeriy42
  committed
  ab46fc8
Commits on Aug 19, 2026
- [ML] Relocate Sandbox2 to MlSandbox and address PR #2873 review
  valeriy42
  committed
  3dc4a56
- formatting
  valeriy42
  committed
  3d96e50
- [ML] Address Jan's PR #2873 review nits
  valeriy42
  committed
  6f57661
- formatting
  valeriy42
  committed
  bf83cda
- [ML] Fix Sandbox2 CI: set ML_SANDBOX2_EXPECT, link zlib, add Windows stub
  valeriy42
  committed
  f0bdcf6
- [ML] Fix Sandbox2 CI regressions from MlSandbox restructure
  valeriy42
  committed
  eeb52ab
- [ML] Fix Sandbox2 zlib link without touching sandbox2 ALIAS
  valeriy42
  committed
  45c1dae
Commits on Aug 20, 2026
Commits on Sep 3, 2026
Commits on Sep 7, 2026
Commits on Sep 8, 2026
- [ML] Harden Sandbox2 spawn exception-safety and enforced-coverage gate
  valeriy42
  committed
  338e1b3
- formatting
  valeriy42
  committed
  17ff410
- [ML] Fix stale CPytorchInferenceSandboxPolicy_Linux.cc cross-references
  valeriy42
  committed
  db5b14a

Commits

Commits on Oct 28, 2025

Commits on Nov 5, 2025

Commits on Nov 6, 2025

Commits on Nov 7, 2025

Commits on Nov 20, 2025

Commits on Nov 21, 2025

Commits on Nov 27, 2025

Commits on Dec 9, 2025

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Commits on Jul 19, 2026

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Commits on Jul 23, 2026

Commits on Jul 27, 2026

Commits on Jul 28, 2026

Commits on Aug 19, 2026

Commits on Aug 20, 2026

Commits on Sep 3, 2026

Commits on Sep 7, 2026

Commits on Sep 8, 2026