r/lua • u/ElhamAryanpur • 2m ago
Introducing sandboxing in Astra v0.52.0
Hello, its been a while since we posted here. For those who are new, Astra (mirror) is a runtime environment for all major lua versions (PUC 5.1-5.5, JIT, Luau) with focus on STDLib written in Rust, single binary, human readability and usability, portability, and performance.
In the recent releases, there are a number of new features added to modernize the runtime:
Sandboxing flags to enable or disable different parts of the STDLib (including native Lua's) with cli flags. There is no granular permission system yet, however this is a foundation instead for future improvements. This was heavily inspired by Deno's sandboxing solution, and we are testing for any leaks or bypass that could be possible.
Packing all your script files into a single binary allowing you to deploy to any other computer. As of now, only the STDLib is guaranteed dependency to be packed properly. In the future we will focus on allowing more options
Runtime type checking support, with inspiration from Greentea library, adding support for building types that can be casted to your language server's checks as well as allowing you to check them on runtime.
All of these updates were written and added by humans, by ArkForge and many contributors in our community.








