docker/execd/v1.0.18

opensandbox-group/OpenSandboxdocker/execd/v1.0.18May 25, 2026by Pangjiping

AI Summary

Fixed a critical bug where process groups were not fully killed on command cancel. Extended the mitmproxy CA wait time to handle transient failures.

Key Highlights

Kill entire process group on command cancel
Extended mitmproxy CA wait from 30s to 300s
Log the actual wait duration for debugging

New Features

Process group termination fix for orphaned children
Extended mitmproxy CA wait for HTTPS stability during recovery

Full Release Notes

## What's New

### 🐛 Bug Fixes
- Kill the entire process group on command cancel. Previously cancellation (client disconnect, timeout, `DELETE /command`) sent SIGKILL only to the bash group leader, so children spawned via `&` or pipelines kept running as orphans. `runCommand` and `killPid` now signal `-pid` (Setpgid group), matching `runBackgroundCommand`; `kill(-pid, 0)` is used for liveness probing. Fixes #922 (#924)
- Extend mitmproxy CA wait from 30s to 300s and log the actual wait duration. The bootstrap script previously gave up after 30s and started the sandbox without system CA trust, silently breaking HTTPS for system libraries when the egress sidecar was recovering from a transient failure (e.g. mitmproxy OOM restart with backoff) (#943)

## 👥 Contributors

Thanks to these contributors ❤️

- @Pangjiping

---
- Docker Hub: opensandbox/execd:v1.0.18
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18