test: enforce strict replay sandboxing in e2e fixtures (#141)

Author: sohankshirsagar

src/instrumentation/libraries/fetch/e2e-tests/cjs-fetch/.tusk/config.yaml

@@ -28,4 +28,6 @@ recording:
   export_spans: false
 
 replay:
+  sandbox:
+    mode: strict
   enable_telemetry: false

src/instrumentation/libraries/fetch/e2e-tests/cjs-fetch/Dockerfile

@@ -10,6 +10,9 @@ COPY src/instrumentation/libraries/fetch/e2e-tests/cjs-fetch/tsconfig.json ./
 ARG CACHEBUST=1
 ARG TUSK_CLI_VERSION=latest
 
+# Required for strict replay sandbox mode.
+RUN apt-get update && apt-get install -y socat bubblewrap && rm -rf /var/lib/apt/lists/*
+
 # Install Tusk Drift CLI
 RUN if [ "$TUSK_CLI_VERSION" = "latest" ]; then \
       curl -fsSL https://raw.githubusercontent.com/Use-Tusk/tusk-drift-cli/main/install.sh | sh; \

src/instrumentation/libraries/fetch/e2e-tests/cjs-fetch/docker-compose.yml

@@ -13,6 +13,11 @@ services:
       args:
         - CACHEBUST=${CACHEBUST:-1}
         - TUSK_CLI_VERSION=${TUSK_CLI_VERSION:-latest}
+    cap_add:
+      - SYS_ADMIN
+    security_opt:
+      - seccomp=unconfined
+      - apparmor=unconfined
     environment:
       - PORT=3000
       - TUSK_ANALYTICS_DISABLED=1

src/instrumentation/libraries/fetch/e2e-tests/esm-fetch/.tusk/config.yaml

@@ -28,4 +28,6 @@ recording:
   export_spans: false
 
 replay:
+  sandbox:
+    mode: strict
   enable_telemetry: false

src/instrumentation/libraries/fetch/e2e-tests/esm-fetch/Dockerfile

@@ -10,6 +10,9 @@ COPY src/instrumentation/libraries/fetch/e2e-tests/esm-fetch/tsconfig.json ./
 ARG CACHEBUST=1
 ARG TUSK_CLI_VERSION=latest
 
+# Required for strict replay sandbox mode.
+RUN apt-get update && apt-get install -y socat bubblewrap && rm -rf /var/lib/apt/lists/*
+
 # Install Tusk Drift CLI
 RUN if [ "$TUSK_CLI_VERSION" = "latest" ]; then \
       curl -fsSL https://raw.githubusercontent.com/Use-Tusk/tusk-drift-cli/main/install.sh | sh; \

src/instrumentation/libraries/fetch/e2e-tests/esm-fetch/docker-compose.yml

@@ -13,6 +13,11 @@ services:
       args:
         - CACHEBUST=${CACHEBUST:-1}
         - TUSK_CLI_VERSION=${TUSK_CLI_VERSION:-latest}
+    cap_add:
+      - SYS_ADMIN
+    security_opt:
+      - seccomp=unconfined
+      - apparmor=unconfined
     environment:
       - PORT=3000
       - TUSK_ANALYTICS_DISABLED=1

src/instrumentation/libraries/firestore/e2e-tests/cjs-firestore/.tusk/config.yaml

@@ -31,4 +31,6 @@ recording:
   export_spans: false
 
 replay:
+  sandbox:
+    mode: strict
   enable_telemetry: false

src/instrumentation/libraries/firestore/e2e-tests/cjs-firestore/Dockerfile

@@ -10,6 +10,9 @@ COPY src/instrumentation/libraries/firestore/e2e-tests/cjs-firestore/tsconfig.js
 ARG CACHEBUST=1
 ARG TUSK_CLI_VERSION=latest
 
+# Required for strict replay sandbox mode.
+RUN apt-get update && apt-get install -y socat bubblewrap && rm -rf /var/lib/apt/lists/*
+
 # Install Tusk Drift CLI
 RUN if [ "$TUSK_CLI_VERSION" = "latest" ]; then \
       curl -fsSL https://raw.githubusercontent.com/Use-Tusk/tusk-drift-cli/main/install.sh | sh; \

src/instrumentation/libraries/firestore/e2e-tests/cjs-firestore/docker-compose.yml

@@ -6,6 +6,11 @@ services:
       args:
         - CACHEBUST=${CACHEBUST:-1}
         - TUSK_CLI_VERSION=${TUSK_CLI_VERSION:-latest}
+    cap_add:
+      - SYS_ADMIN
+    security_opt:
+      - seccomp=unconfined
+      - apparmor=unconfined
     environment:
       - PORT=3000
       - FIREBASE_PROJECT_ID=${FIREBASE_PROJECT_ID}

src/instrumentation/libraries/firestore/e2e-tests/esm-firestore/.tusk/config.yaml

@@ -31,4 +31,6 @@ recording:
   export_spans: false
 
 replay:
+  sandbox:
+    mode: strict
   enable_telemetry: false