package rrg.action.execute_signed_command

Get desktop application:
View/edit binary Protocol Buffers messages

• bytes command = 1

  Serialized `Command` message to execute.

• bytes unsigned_stdin = 2

  Standard input to pass to the executed command. For this option to work, the command that has been signed has to allow arbitrary standard input by having the `unsigned_stdin_allowed` flag set.

• repeated string unsigned_args = 5

  Arguments to pass to the executed command. i-th argument specified here will be provided to the i-th argument of the signed command that has `unsigned_arg_allowed` flag set.

• map<string, string> unsigned_env = 6

  Environment variables to invoke the executed command with. For this option to work, the command that has been signed has to have each key from this map be present in `env_unsigned_allowed`.

• repeated bytes filestore_file_sha256s = 7

  SHA-256 digests of the filestore files to pass to the executed command. i-th file specified here will be provided as a path to the file on disk to the i-th argument of the signed command that has `filestore_file_allowed` set.

• bytes command_ed25519_signature = 3

  An [Ed25519][1] signature of the command. [1]: https://en.wikipedia.org/wiki/EdDSA#Ed25519

• optional google.protobuf.Duration timeout = 4

  Timeout after which command execution is aborted. If not specified, the command execution is aborted immediately.

• oneof executable

  • fs.Path path = 1

    Path to the executable file to execute.

  • bytes filestore_file_sha256 = 9

    SHA-256 digest of a filestore file to execute. The filestore file must have been stored with the executable bit set.

• repeated string args_signed = 2

  Arguments to pass to the command.

  TODO: Deprecate this field.

• repeated Command.Arg args = 6

  Arguments to pass to the command.

• map<string, string> env_signed = 3

  Environment in which to invoke the command. Note that environment variables are not inherited from the RRG process by default and are empty if not specified. To inherit specific variables from the RRG process use `env_inherited`.

• repeated string env_unsigned_allowed = 7

  Environment variables that can be specified outside of the command.

• repeated string env_inherited = 8

  Environment variables that are inherited from the RRG process. If a variable is set to be inherited but an explicit value is provided, the explicit value takes precedence.

• oneof stdin

  • bytes signed_stdin = 4

    Fixed standard input to pass to the executed command.

  • bool unsigned_stdin_allowed = 5

    Whether the command should allow execution with arbitrary standard input without it being pre-signed.

Used in: Command

• oneof arg

  • string signed = 1

    Fixed argument to pass to the executed command.

  • bool unsigned_allowed = 2

    Whether to allow execution of arbitrary argument passed in the request without it being pre-signed.

  • bool filestore_file_sha256_allowed = 3

    Whether to allow passing path to a filestore file specified in the request as the argument.

TODO: https://github.com/google/rrg/issues/137 This exists solely to support reading preverified commands from a file. Once the mechanism of preverified commands is no longer needed, this should be deleted.

• repeated bytes commands = 1

  Serialized `Command` messages.

• int32 exit_code = 1

  [Exit code][1] of the command subprocess. This is available only if the command execution was not aborted by a signal which may happen on Unix systems. [1]: https://en.wikipedia.org/wiki/Exit_status

• int32 exit_signal = 2

  [Exit signal][1] of the command subprocess. This is available only if the process was terminated by a signal and should happen only on Unix systems. [1]: https://en.wikipedia.org/wiki/Signal_(IPC)#POSIX_signals

• bytes stdout = 3

  Standard output of the command execution. Because in general standard output can be arbitrarily long, this will be truncated to fit within the message limit. `stdout_truncated` field will be set if it is the case.

• bytes stderr = 4

  Standard error of the command execution. Because in general standard error can be arbitrarily long, this will be truncated to fit within the message limit. `stderr_truncated` field will be set if it is the case.

• bool stdout_truncated = 5

  Set if value of `stdout` had to be truncated.

• bool stderr_truncated = 6

  Set if value of `stderr` had to be truncated.