id.go RawHistoryFolder

1// SPDX-License-Identifier: MIT
2
3package sandbox
4
5import (
6	"crypto/rand"
7	"encoding/hex"
8	"fmt"
9	"strings"
10)
11
12// NewID returns "er" + 8 random hex digits: short (socket paths), unique enough
13// for concurrent sandboxes, and safe in file, interface and Docker object names.
14func NewID() (string, error) {
15	var b [4]byte
16	if _, err := rand.Read(b[:]); err != nil {
17		return "", fmt.Errorf("random id: %w", err)
18	}
19	return "er" + hex.EncodeToString(b[:]), nil
20}
21
22// ValidID reports whether id has the form produced by NewID. It guards paths and
23// process matches built from ids read back from disk or from /proc.
24func ValidID(id string) bool {
25	if len(id) != 10 || !strings.HasPrefix(id, "er") {
26		return false
27	}
28	_, err := hex.DecodeString(id[2:])
29	return err == nil
30}