Bazel: windows: support sandboxing [blocking #5640]

[laszlocsomor]

Description of the problem / feature request:

This is an umbrella bug for the feature request of supporting sandboxing on Windows.

What operating system are you running Bazel on?

Windows 10

What's the output of bazel info release?

release 0.13.0

Have you found anything relevant by searching the web?

Microsoft recently opensourced Detours, which could be useful: https://github.com/Microsoft/Detours

[j3parker]

I'm sure you're aware, but Windows has something called the Host Compute Service which is used to implement containers for things like Docker.

This blog post has the high level picture and they link to wrappers+sample code for C# and Go (which looks more complete and is what Docker actually uses.)

Maybe something from there would be useful?

[laszlocsomor]

I wasn't aware, thanks for the info! Could be useful indeed. Though supporting the Docker-based sandbox strategy on Windows may be more convenient than implementing native sandboxing.

[j3parker]

Cool! Makes sense.

[ilya-klyuchnikov]

FYI: https://github.com/Microsoft/BuildXL has an implementation of Windows Sandboxing

[laszlocsomor]

@ilya-klyuchnikov -- Thanks for the heads-up! Very interesting, I'll take a look and try to build it.

[jin]

@laszlocsomor could you please add a priority to this issue?

[laszlocsomor]

Setting priority to p3 -- I don't expect much focus on this before Bazel 1.0 (though this is not ruled out either).

[laszlocsomor]

@rongjiecomputer is working on this feature \o/

[konste]

I wonder if you looked at FUSE implementations for Windows, such as https://dokan-dev.github.io/ or http://www.secfs.net/winfsp/ ? As Bazel already makes use of sandboxfs for Linux and Mac it may be beneficial to utilize as similar tech as possible on Windows.

[aherrmann]

@laszlocsomor @rongjiecomputer What's the status of this? Is the current progress documented somewhere?

[laszlocsomor]

@aherrmann : @rongjiecomputer implemented experimental sandbox support as part of Google Summer of Code 2019 (GSoC).

All about the project is in a public Google doc: https://docs.google.com/document/d/1dbF5cGYJouGF5zd0GDE-rbUvkKvH36DnNdtEvE4yV6w/edit

The Bazel team does not maintain this feature. We currently have no plans to work on it either.