run_code as a user instead of root by mishushakov · Pull Request #94 · e2b-dev/code-interpreter

mishushakov · 2025-04-28T11:53:19Z

Jupyter Server and Code Interpreter are started as a non-privileged user
Adds ability to change user by creating a new context
BREAKING: Default user root > user to match the Sandbox commands.run behavior
POSSIBLY BREAKING: when cwd is not set and user is root, it will set cwd to /root

Sample code

const ctx = await sbx.createCodeContext({ language: "python", user: "user" })

const code = await sbx.runCode(`import getpass; print(getpass.getuser())`, { context })
console.log(code.logs);

{
    stdout: [ "user\n" ],
    stderr: [],
}

linear · 2025-04-28T11:53:22Z

E2B-2123 Permissions: calling `run_code` as a different user

jakubno · 2025-04-28T12:22:27Z

This won't be probably backwards compatible right?

Can I specify if I want run something as root?

jakubno

I think we just need to be able to pass user. Otherwise, someone might need to run something as root, leading to the same issue.

…user-e2b-2123

js/src/sandbox.ts

template/e2b.toml

template/server/api/models/create_context.py

template/server/main.py

jakubno · 2025-05-14T14:24:47Z

template/test.Dockerfile

+
+# Change ownership of all files to user
+RUN chown -R user:user $HOME
+
+USER user


why are you doing it as last thing? If you would set the user as a first thing you probably don't need change the ownership

the problem here is: "user" does not exist in python image
and we cannot add user before we have "sudo" dependency installed

so this is why it's the last

mishushakov · 2025-05-14T19:56:38Z

I created a new template, code-interpreter-v1beta1

mishushakov · 2025-05-15T19:57:40Z

template/e2b.toml

-dockerfile = "e2b.Dockerfile"
-template_name = "code-interpreter-v1"
-template_id = "nlhz8vlwyupq845jsdg9"
+start_cmd = "sudo -u user /home/user/.jupyter/start-up.sh"


one thing: this is a breaking change, should I put a script in /root/.jupyter/start-up.sh that just calls the actual start-up.sh with sudo -u user?

graphite-app · 2025-09-25T10:46:01Z

template/Dockerfile


 # Copy matplotlibrc
-COPY matplotlibrc /root/.config/matplotlib/.matplotlibrc
+COPY matplotlibrc $HOME/.config/matplotlib/matplotlibrc


There's a path inconsistency between the Dockerfile and startup script. In the Dockerfile, the matplotlibrc file is copied to $HOME/.config/matplotlib/matplotlibrc (without a dot prefix), but in start-up.sh it's referenced as $HOME/.config/matplotlib/.matplotlibrc (with a dot prefix).

To resolve this, either:

Update this line to include the dot prefix: COPY matplotlibrc $HOME/.config/matplotlib/.matplotlibrc, or

Update the path in start-up.sh to remove the dot prefix: MATPLOTLIBRC=$HOME/.config/matplotlib/matplotlibrc

This will ensure the file is correctly located where the startup script expects to find it.

Suggested change

COPY matplotlibrc $HOME/.config/matplotlib/matplotlibrc

COPY matplotlibrc $HOME/.config/matplotlib/.matplotlibrc

Spotted by Diamond

Is this helpful? React 👍 or 👎 to let us know.

mishushakov added 3 commits April 26, 2025 11:36

wip

8ad22ef

fix file paths

14e0c51

fixes start command, adds logging, removes useradd in prod Docker

9d73789

undo some changes to e2b.toml, bring back r kernel

e6edde7

mishushakov self-assigned this Apr 28, 2025

mishushakov added the improvement Improvement for current functionality label Apr 28, 2025

mishushakov marked this pull request as ready for review April 28, 2025 12:09

mishushakov requested review from 0div, ValentaTomas and jakubno as code owners April 28, 2025 12:09

This comment was marked as outdated.

Sign in to view

jakubno requested changes Apr 28, 2025

View reviewed changes

mishushakov added 5 commits April 29, 2025 15:52

wip

4aeaeef

wip

741e0e5

qip

822beda

sync'd some changes from test.Dockerfile to Dockerfile

162c3de

changed deno kernel path

f1c427d

mishushakov marked this pull request as draft April 30, 2025 16:12

change user in new context

38ee9c7

mishushakov requested a review from jakubno May 2, 2025 09:25

Merge branch 'main' into permissions-calling-run_code-as-a-different-…

f16e512

…user-e2b-2123

mishushakov added feature New feature or request and removed improvement Improvement for current functionality labels May 14, 2025

mishushakov added 2 commits May 14, 2025 16:01

start default kernel as root to avoid breaking change

23f58ea

adds ability to pass user to the createCodeContext SDK method

4a8c98a

mishushakov marked this pull request as ready for review May 14, 2025 14:14

added changeset

44c2a42

jakubno requested changes May 14, 2025

View reviewed changes

mishushakov added 3 commits May 14, 2025 16:57

changed default user to "user" as per @jakubno

d49ea96

change default cwd depending on the user if cwd is not provided

f4fc072

changed template to code-interpreter-v1beta1

feb767e

mishushakov commented May 15, 2025

View reviewed changes

jakubno marked this pull request as draft July 15, 2025 09:50

graphite-app bot reviewed Sep 25, 2025

View reviewed changes

ValentaTomas unassigned mishushakov Sep 25, 2025

ValentaTomas removed the request for review from 0div October 7, 2025 05:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

run_code as a user instead of root#94

run_code as a user instead of root#94
mishushakov wants to merge 17 commits intomainfrom
permissions-calling-run_code-as-a-different-user-e2b-2123

mishushakov commented Apr 28, 2025 •

edited

Loading

Uh oh!

linear bot commented Apr 28, 2025

Uh oh!

jakubno commented Apr 28, 2025 •

edited

Loading

Uh oh!

This comment was marked as outdated.

jakubno left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

jakubno May 14, 2025

Uh oh!

mishushakov May 14, 2025

Uh oh!

mishushakov commented May 14, 2025

Uh oh!

mishushakov May 15, 2025

Uh oh!

graphite-app bot Sep 25, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	COPY matplotlibrc $HOME/.config/matplotlib/matplotlibrc
	COPY matplotlibrc $HOME/.config/matplotlib/.matplotlibrc

Conversation

mishushakov commented Apr 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

linear bot commented Apr 28, 2025

Uh oh!

jakubno commented Apr 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

jakubno left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

jakubno May 14, 2025

Choose a reason for hiding this comment

Uh oh!

mishushakov May 14, 2025

Choose a reason for hiding this comment

Uh oh!

mishushakov commented May 14, 2025

Uh oh!

mishushakov May 15, 2025

Choose a reason for hiding this comment

Uh oh!

graphite-app bot Sep 25, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

mishushakov commented Apr 28, 2025 •

edited

Loading

jakubno commented Apr 28, 2025 •

edited

Loading