feat: support the openedx/codejail-service implementation

Author: MoisesGSalas

README.rst

@@ -1,8 +1,14 @@
 Codejail plugin for `Tutor`_
 ============================
 
-Tutor plugin that configures and runs a `Codejail Service`_ using a REST API. `Codejail`_ allows for the
-secure execution of untrusted code within sandboxes, providing a safe environment for running potentially dangerous code.
+Tutor plugin that configures and runs a `Codejail Service`_ using a REST API.
+`Codejail`_ allows for the secure execution of untrusted code within sandboxes,
+providing a safe environment for running potentially dangerous code.
+
+Starting from the Ulmo release, the codejail plugin is transitioning to an
+alternative implementation of the safe-exec API ( `_Codejail Service V2`_).
+You can opt-in to use this new implementation on Ulmo before it finally becomes
+the default on the Verawood release.
 
 .. _Tutor: https://docs.tutor.overhang.io
 .. _Codejail Service: https://github.com/eduNEXT/codejailservice
@@ -69,7 +75,13 @@ To customize the configuration, update the following settings in Tutor:
 - ``SERVICE_V2_VERSION``: (default: ``{{ OPENEDX_COMMON_VERSION }}``)
 - ``USE_SERVICE_V2``: (default: ``False``)
 
-The ``CODEJAIL_V2_*`` settings are meant to be used only during the Ulmo release a
+The ``CODEJAIL_V2_*`` settings are meant to be used only during the Ulmo
+release and will be phased-out during the Verawood release.
+
+To opt-in to the new implementation of the code-exec API set ``USE_SERVICE_V2``
+to ``True`` and re-deploy your environment. If you are using a a custom image
+for the codejail service you will need to rebuild it with ``USE_SERVICE_V2``
+set to ``True`.
 
 Custom Image
 ~~~~~~~~~~~~

tutorcodejail/patches/local-docker-compose-services

@@ -38,6 +38,6 @@ codejail-apparmor-loader:
     - -v=2
     - /profiles
   volumes:
-    - ../plugins/codejail/apps/profiles/docker-edx-sandbox:/profiles/docker-edx-sandbox:ro
+    - ../plugins/codejail/apps/profiles/:/profiles/:ro
     - /sys:/sys
     - /etc/apparmor.d:/etc/apparmor.d

tutorcodejail/templates/codejail/build/codejail-service/Dockerfile

@@ -7,15 +7,15 @@ FROM scratch AS sandbox-dependencies
 # Where to get the Python dependencies lockfile for installing
 # packages into the sandbox environment. Defaults to the codejail
 # dependencies in edx-platform.
-ARG SANDBOX_DEPS_REPO=openedx/edx-platform
+ARG SANDBOX_DEPS_REPO={{ EDX_PLATFORM_REPOSITORY }}
 ARG SANDBOX_DEPS_VERSION={{ CODEJAIL_SERVICE_V2_VERSION }}
 # Path to the lockfile in the deps repo, as dir + filename.
 #
 # The path base.txt will get the latest dependencies, but this needs
 # to be coordinated with SANDBOX_PY_VER as each release has a
 # different Python support window.
 ARG SANDBOX_DEPS_SRC_DIR=requirements/edx-sandbox
-ADD https://github.com/${SANDBOX_DEPS_REPO}.git#${SANDBOX_DEPS_VERSION}:${SANDBOX_DEPS_SRC_DIR} /
+ADD ${SANDBOX_DEPS_REPO}#${SANDBOX_DEPS_VERSION}:${SANDBOX_DEPS_SRC_DIR} /
 
 FROM docker.io/ubuntu:24.04 AS app
 ARG APP_PY_VER=3.12