Skip to content

Add internal sandbox WebSocket SSH server - #7588

Open
HsingTang wants to merge 1 commit into
mainfrom
HsingTang/stack/sandbox-websocket-server
Open

HsingTang wants to merge 1 commit into
mainfrom
HsingTang/stack/sandbox-websocket-server

Conversation

@HsingTang

@HsingTang HsingTang commented Nov 13, 2026 •

Copy link
Copy Markdown

🥞 Stacked PR

Use this link to review incremental changes.


Changes

Add the hidden, internal databricks sandbox server command. It accepts WebSocket connections and connects each SSH stream to sshd -i, using a prepared configuration.

Keep the existing relay in experimental/ssh/internal/proxy and put the new sandbox implementation in experimental/ssh/sandbox. Existing SSH files stay at their original paths. Allow experimental imports only in the four sandbox SSH command integration files.

Why

Sandbox SSH needs a server that works through HTTP/WebSocket port forwarding without compute-specific setup. Adding this command first leaves the current sandbox SSH command unchanged.

Tests

Sandbox and compute SSH unit and acceptance tests pass with ./task test-sandbox test-exp-ssh. Race tests cover binary transport, readiness failures, connection admission, cancellation, child cleanup, and idle shutdown. Formatting, checks, and lint pass.

The package-layout change was reviewed locally with Isaac, with no blocking findings.

This PR was written with Codex.

@eng-dev-ecosystem-bot

eng-dev-ecosystem-bot commented Nov 13, 2026 •

Copy link
Copy Markdown
Collaborator

✅ Integration test report

Commit: 36dc63c

Run: 43517717354

Env 💚​RECOVERED ✅​pass 🙈​skip Time
💚​ aws linux-2core-8gb 1 270 15 5:32
💚​ aws-windows-latest-4core-16gb 1 272 13 3:53
💚​ azure linux-2core-8gb 1 269 15 4:56
💚​ azure-windows-latest-4core-16gb 1 271 13 3:52
💚​ gcp linux-2core-8gb 1 270 15 4:28
💚​ gcp-windows-latest-4core-16gb 1 272 13 3:43
Test Name aws linux-2core-8gb aws-windows-latest-4core-16gb azure linux-2core-8gb azure-windows-latest-4core-16gb gcp linux-2core-8gb gcp-windows-latest-4core-16gb
💚​ TestAccept 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R
Top 3 slowest tests (at least 2 minutes):
duration env testname
3:30 gcp-windows-latest-4core-16gb TestAccept
3:14 aws-windows-latest-4core-16gb TestAccept
2:55 azure-windows-latest-4core-16gb TestAccept

@HsingTang
HsingTang force-pushed the HsingTang/stack/sandbox-websocket-server branch from d3e8539 to e27bc56 Compare November 13, 2026 21:16
@HsingTang HsingTang changed the title Add sandbox WebSocket SSH server Add internal sandbox WebSocket SSH server Nov 13, 2026
@HsingTang
HsingTang force-pushed the HsingTang/stack/sandbox-websocket-server branch from e27bc56 to 36dc63c Compare November 13, 2026 22:12
@HsingTang
HsingTang marked this pull request as ready for review November 13, 2026 22:18
@HsingTang
HsingTang requested review from a team as code owners November 13, 2026 22:18

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants