自建 Agent Sandbox 经验总结与实施指南

# 使用socat进行端口转发
socat TCP4-LISTEN:9222,bind=169.254.0.21,reuseaddr,fork TCP4:localhost:9222

# 启动rsync守护进程
rsync --daemon --no-detach

# 使用inotify监控文件变化
inotifywait -mrq -e close_write,delete,move \
  --exclude '(^|/)(\.rsync-tmp|.*tmp|node_modules(/|$))' \
  /home/user/share/

# 同步脚本
rsync -avz --delete \
  --exclude 'node_modules' \
  --exclude '*.tmp' \
  /home/user/share/ remote-host:/backup/share/

--remote-debugging-port=9222        # 远程调试
--user-data-dir=<独立目录>           # 用户数据隔离
--no-first-run                      # 跳过首次运行
--disable-gpu                       # 禁用GPU (容器环境)

--load-extension=<扩展路径>          # 加载扩展
--use-angle=swiftshader-webgl      # 软件渲染
--disable-dev-shm-usage            # 避免/dev/shm问题
--no-sandbox                       # 容器环境可能需要

--remote-debugging-address=127.0.0.1  # 仅本地访问
# 或使用socat转发到外部IP

# 启动Xvfb
Xvfb :1 -screen 0 1280x1024x24 -ac

# 启动x11vnc
x11vnc -display :1 -rfbport 5900 -shared -forever -nopw

# 启动websockify
websockify --web /opt/noVNC 6080 localhost:5900

# 功能开关环境变量
ENABLE_JUPYTER=true
ENABLE_CHROME=true
ENABLE_VNC=false
ENABLE_CODE_SERVER=false
ENABLE_PDF_READER=true

# 启动脚本根据环境变量决定启动哪些服务
if [ "$ENABLE_JUPYTER" = "true" ]; then
    start_jupyter
fi

if [ "$ENABLE_CHROME" = "true" ]; then
    start_chrome
fi

# 仅允许必要端口
iptables -A INPUT -p tcp --dport 22 -j ACCEPT    # SSH
iptables -A INPUT -p tcp --dport 8888 -j ACCEPT  # Jupyter
iptables -A INPUT -p tcp --dport 9222 -j ACCEPT  # Chrome调试
iptables -A INPUT -j DROP                         # 其他拒绝

# 安装Jupyter
pip install jupyter jupyterlab

# 创建systemd服务
cat > /etc/systemd/system/jupyter.service <<EOF
[Unit]
Description=Jupyter Lab
After=network.target

[Service]
Type=simple
User=agent
ExecStart=/usr/local/bin/jupyter lab \
    --ip=0.0.0.0 \
    --port=8888 \
    --no-browser \
    --allow-root
Restart=always

[Install]
WantedBy=multi-user.target
EOF

systemctl enable jupyter.service
systemctl start jupyter.service

# 安装Chrome
wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | apt-key add -
echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" > /etc/apt/sources.list.d/google-chrome.list
apt-get update
apt-get install -y google-chrome-stable

# 创建启动脚本
cat > /usr/local/bin/start-chrome.sh <<EOF
#!/bin/bash
google-chrome-stable \
    --remote-debugging-port=9222 \
    --remote-debugging-address=127.0.0.1 \
    --user-data-dir=/home/agent/.config/browser \
    --no-first-run \
    --disable-gpu \
    --use-angle=swiftshader-webgl \
    --no-sandbox \
    --disable-dev-shm-usage
EOF

chmod +x /usr/local/bin/start-chrome.sh

# 安装VNC相关工具
apt-get install -y x11vnc websockify xvfb fluxbox

# 创建启动脚本
cat > /usr/local/bin/start-vnc.sh <<EOF
#!/bin/bash
# 启动Xvfb
Xvfb :1 -screen 0 1280x1024x24 -ac &
export DISPLAY=:1

# 启动窗口管理器
fluxbox &

# 启动x11vnc
x11vnc -display :1 -rfbport 5900 -shared -forever -nopw &

# 启动websockify
websockify --web /opt/noVNC 6080 localhost:5900 &
EOF

chmod +x /usr/local/bin/start-vnc.sh

# 安装rsync和inotify工具
apt-get install -y rsync inotify-tools

# 创建rsync配置文件
cat > /etc/rsyncd.conf <<EOF
[share]
path = /home/agent/share
comment = Agent Share Directory
read only = no
auth users = agent
secrets file = /etc/rsyncd.secrets
EOF

# 创建rsync密钥文件
echo "agent:password" > /etc/rsyncd.secrets
chmod 600 /etc/rsyncd.secrets

# 创建文件同步脚本
cat > /usr/local/bin/sync-share.sh <<EOF
#!/bin/bash
# 使用inotify监控文件变化
inotifywait -mrq -e close_write,delete,move \\
  --exclude '(^|/)(\.rsync-tmp|.*tmp|node_modules(/|$))' \\
  /home/agent/share/ | while read path action file; do
    # 同步到远程
    rsync -avz --delete \\
      --exclude 'node_modules' \\
      --exclude '*.tmp' \\
      /home/agent/share/ remote-host:/backup/share/
done
EOF

chmod +x /usr/local/bin/sync-share.sh

# 创建systemd服务
cat > /etc/systemd/system/rsync.service <<EOF
[Unit]
Description=rsync daemon
After=network.target

[Service]
Type=forking
ExecStart=/usr/bin/rsync --daemon --no-detach
Restart=always

[Install]
WantedBy=multi-user.target
EOF

systemctl enable rsync.service
systemctl start rsync.service

# 创建专用用户
useradd -m -s /bin/bash sandbox
usermod -aG sudo sandbox

# 配置sudo (严格模式)
cat > /etc/sudoers.d/sandbox <<EOF
sandbox ALL=(ALL) NOPASSWD: /usr/bin/apt-get update
sandbox ALL=(ALL) NOPASSWD: /usr/bin/pip install *
# 其他必要命令
EOF

# 只读挂载系统目录
mount -o remount,ro /usr
mount -o remount,ro /opt
mount -o remount,ro /etc

# 配置防火墙
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 8888 -j ACCEPT
iptables -A INPUT -p tcp --dport 9222 -j ACCEPT
iptables -A INPUT -j DROP

# 配置日志收集
apt-get install -y rsyslog

# 配置日志转发
cat >> /etc/rsyslog.conf <<EOF
*.* @@log-server:514
EOF

# 安装监控工具
pip install prometheus-client

# 创建监控脚本
cat > /usr/local/bin/metrics-exporter.py <<EOF
#!/usr/bin/env python3
from prometheus_client import start_http_server, Gauge
import psutil

cpu_usage = Gauge('cpu_usage_percent', 'CPU usage percentage')
memory_usage = Gauge('memory_usage_percent', 'Memory usage percentage')

def collect_metrics():
    cpu_usage.set(psutil.cpu_percent())
    memory_usage.set(psutil.virtual_memory().percent)

if __name__ == '__main__':
    start_http_server(8000)
    while True:
        collect_metrics()
        time.sleep(5)
EOF

# 使用环境变量配置
export JUPYTER_PORT=8888
export CHROME_DEBUG_PORT=9222

# 添加Chrome启动参数
--no-sandbox
--disable-dev-shm-usage
--disable-gpu

# 检查socat是否运行
ps aux | grep socat

# 检查端口是否监听
ss -tulpn | grep 9222

# 重新启动socat
socat TCP4-LISTEN:9222,bind=169.254.0.21,reuseaddr,fork TCP4:localhost:9222

# 检查认证信息
echo $AWS_ACCESS_KEY_ID
echo $AWS_SECRET_ACCESS_KEY

# 测试S3连接
aws s3 ls s3://bucket-name

# 重新挂载
umount /mnt/storage
s3fs bucket-name /mnt/storage -o url=https://s3.amazonaws.com

# 检查X服务器
ps aux | grep Xvfb
ps aux | grep Xorg

# 检查DISPLAY环境变量
echo $DISPLAY

# 重新启动X服务器
Xvfb :1 -screen 0 1280x1024x24 -ac
export DISPLAY=:1