fix: Node.js built-in fetch fails inside nsjail with WebAssembly.instantiate() OOM, even after increasing

YangZxi · YangZxi · commit 9a0df82907e9 · 2026-04-16T14:09:26.000+08:00
diff --git a/internal/executor/executor.go b/internal/executor/executor.go
@@ -397,6 +397,7 @@ func buildNsJailArgs(configPath string, spec sandboxSpec, timeLimit int) []strin
 		"--rlimit_cpu", strconv.Itoa(spec.RlimitCPUSec),
 		"--rlimit_nofile", strconv.Itoa(spec.RlimitNoFile),
 		"--time_limit", strconv.Itoa(timeLimit),
+		"--disable_rlimits",
 		"--",
 		spec.CommandPath,
 	)

Original file line number	Diff line number	Diff line change
`@@ -397,6 +397,7 @@ func buildNsJailArgs(configPath string, spec sandboxSpec, timeLimit int) []strin`
`397`	`397`	`"--rlimit_cpu", strconv.Itoa(spec.RlimitCPUSec),`
`398`	`398`	`"--rlimit_nofile", strconv.Itoa(spec.RlimitNoFile),`
`399`	`399`	`"--time_limit", strconv.Itoa(timeLimit),`
	`400`	`+ "--disable_rlimits",`
`400`	`401`	`"--",`
`401`	`402`	`spec.CommandPath,`
`402`	`403`	`)`