hopefully will work

probe.py

@@ -0,0 +1,99 @@
+import gradio as gr
+import os
+import shutil
+import subprocess
+from datetime import datetime
+import sys
+
+
+def sandbox_probe():
+    report = {"ok": False}
+
+    try:
+        report["timestamp"] = datetime.utcnow().isoformat() + "Z"
+        report["cwd"] = os.getcwd()
+        report["__file__"] = __file__
+        report["python_bin"] = sys.executable
+        report["python3_which"] = shutil.which("python3")
+        report["python_which"] = shutil.which("python")
+
+        report["tools"] = {
+            "unshare": shutil.which("unshare"),
+            "bwrap": shutil.which("bwrap"),
+            "firejail": shutil.which("firejail"),
+            "nsjail": shutil.which("nsjail"),
+        }
+
+        # ---------------- unshare test ----------------
+        try:
+            r = subprocess.run(
+                ["unshare", "-n", "--fork", sys.executable, "-c", "print('ok')"],
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+                text=True,
+                timeout=5,
+            )
+            report["unshare_test"] = {
+                "returncode": r.returncode,
+                "stdout": r.stdout,
+                "stderr": r.stderr,
+            }
+        except Exception as e:
+            report["unshare_test"] = {"exception": repr(e)}
+
+        # ---------------- bwrap test ----------------
+        if not report["tools"]["bwrap"]:
+            report["bwrap_test"] = "bwrap not installed"
+        else:
+            try:
+                r = subprocess.run(
+                    [
+                        "bwrap",
+                        "--unshare-net",
+                        "--die-with-parent",
+                        "--ro-bind", "/", "/",
+                        "--proc", "/proc",
+                        "--dev", "/dev",
+                        sys.executable, "-c", "print('ok')",
+                    ],
+                    stdout=subprocess.PIPE,
+                    stderr=subprocess.PIPE,
+                    text=True,
+                    timeout=5,
+                )
+                report["bwrap_test"] = {
+                    "returncode": r.returncode,
+                    "stdout": r.stdout,
+                    "stderr": r.stderr,
+                }
+            except Exception as e:
+                report["bwrap_test"] = {"exception": repr(e)}
+
+        report["ok"] = True
+        return report
+
+    except Exception as e:
+        report["fatal_exception"] = repr(e)
+        return report
+
+
+with gr.Blocks() as demo:
+    gr.Markdown(
+        """
+        # 🧪 Sandbox Capability Probe
+
+        This page checks what sandboxing features are available in the current
+        Hugging Face Space runtime (e.g. `unshare`, `bubblewrap`).
+
+        Nothing here runs student code.
+        """
+    )
+
+    run_btn = gr.Button("Run sandbox probe")
+    output = gr.JSON(label="Probe output")
+
+    run_btn.click(fn=sandbox_probe, inputs=[], outputs=output)
+
+
+# IMPORTANT for Hugging Face Spaces
+demo.launch(server_name="0.0.0.0", server_port=int(os.environ.get("PORT", 7860)))

requirements.txt

@@ -12,4 +12,4 @@ pandas
 numpy
 requests
 matplotlib
-tabulate
+tabulate

runner.py

@@ -0,0 +1,38 @@
+import argparse
+import importlib.util
+import json
+import os
+import sys
+
+def import_main(submission_dir: str):
+    main_path = os.path.join(submission_dir, "main.py")
+    if not os.path.exists(main_path):
+        raise RuntimeError("main.py not found in submission directory")
+
+    # Make relative imports work
+    sys.path.insert(0, submission_dir)
+
+    spec = importlib.util.spec_from_file_location("student_main", main_path)
+    mod = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(mod)
+    return mod
+
+def main():
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--submission_dir", required=True)
+    ap.add_argument("--input", required=True)
+    ap.add_argument("--output", required=True)
+    args = ap.parse_args()
+
+    mod = import_main(args.submission_dir)
+
+    if not hasattr(mod, "evaluate"):
+        raise RuntimeError("evaluate(filepath) not found in main.py")
+
+    pred = mod.evaluate(args.input)
+
+    with open(args.output, "w") as f:
+        json.dump(pred, f)
+
+if __name__ == "__main__":
+    main()