- Install the bundle into AppKernel
- Import its config and routing.yml
- Configure your system
useradd sandbox --home /home/sandbox
echo 'www-data ALL= NOPASSWD: /var/www/propelsandbox/src/PropelSandbox/Resources/meta/jail.sh' >> /etc/sudoers // or sudo visudo
#dont forget to do this on server boot, use iptables-persistent
iptables -I OUTPUT -j REJECT -m owner --gid-owner sandbox
iptables -I OUTPUT -j ACCEPT -p tcp -d 127.0.0.1 -m owner --gid-owner sandbox
- make sure
/var/www/propelsandbox/src/PropelSandbox/Resources/meta/jail.sh
is only writeable by root! - fire
bower install
insrc/PropelSandbox
- make sure /tmp/propelsandbox is writeable by your web server
- user
sandbox
needs access to/tmp/propelsandbox/
,/tmp/propelsandbox/chroots/
rx. - Make sure all dependencies are set up. See @propelorm/sandbox-vagrant/bootstrap.sh for more information.