nonebot2 插件：群内执行代码

[yuudi]

# 使用前请安装好 docker，并拉取好镜像：ubuntu:20.04，python:3.7，node:14，php:7.4-cli
# 并安装依赖：pip install requests aiohttp docker

import asyncio
import requests
import docker
import aiohttp
from functools import partial
from nonebot import on_command
from nonebot.adapters.cqhttp import Bot, Event, MessageSegment

def unescape(s: str) -> str:
    '''对字符串进行 CQ 码去转义。'''
    return s.replace(',', ',') \
        .replace('[', '[') \
        .replace(']', ']') \
        .replace('&', '&')


client = docker.from_env()

async def run_and_get_result(container, command):
    try:
        c = client.containers.run(
            container, command,
            volumes={'qqbottmp': {'bind': '/bot', 'mode': 'rw'}},
            working_dir='/bot',
            detach=True,
            cpu_quota=300000,  # 限制 30% CPU
            mem_limit='64m',  # 限制 64MB 内存
            # network_disabled=True,  # 禁用网络
        )
    except docker.errors.APIError as e:
        return 'Service Internal Error'
    try:
        await asyncio.get_running_loop().run_in_executor(None, partial(
            c.wait, timeout=6
        ))
        timeout = False
    except:
        timeout = True
    if timeout:
        asyncio.ensure_future(asyncio.get_running_loop().run_in_executor(None, partial(c.remove, force=True)))
        return 'Execution Timeout'
    else:
        logs = c.logs().decode()
        asyncio.ensure_future(asyncio.get_running_loop().run_in_executor(None, c.remove))
        return logs.strip()

async def upload_logs(logs):
    try:
        async with aiohttp.request('POST', 'https://paste.yobot.win/pasteme.php', data=logs) as resp:
            if resp.status != 200:
                return 'logs too long'
            url = 'https://paste.yobot.win/' + await resp.text()
            return '结果过长，请在网页查看：\n' + url
    except Exception as e:
        return 'logs too long'


exec_python = on_command('run python', aliases={'run py'}, priority=5)

@exec_python.handle()
async def _(bot: Bot, event: Event, state: dict):
    args = unescape(str(event.message))
    r = await run_and_get_result('python:3.7', ['python', '-c', args])
    if len(r) > 500:
        r = await upload_logs(r)
    r = (event.sender['card'] or event.sender['nickname']) + '\n\n' + (r or '<empty output>')
    await exec_python.finish(r)


exec_bash = on_command('run bash', aliases={'run sh'}, priority=5)

@exec_bash.handle()
async def _(bot: Bot, event: Event, state: dict):
    args = unescape(str(event.message))
    r = await run_and_get_result('ubuntu:20.04', ['bash', '-c', args])
    if len(r) > 500:
        r = await upload_logs(r)
    r = (event.sender['card'] or event.sender['nickname']) + '\n\n' + (r or '<empty output>')
    await exec_python.finish(r)


exec_js = on_command('run node', aliases={'run js', 'run nodejs', 'run javascript'}, priority=5)

@exec_js.handle()
async def _(bot: Bot, event: Event, state: dict):
    args = unescape(str(event.message))
    r = await run_and_get_result('node:14', ['node', '-e', args])
    if len(r) > 500:
        r = await upload_logs(r)
    r = (event.sender['card'] or event.sender['nickname']) + '\n\n' + (r or '<empty output>')
    await exec_python.finish(r)


exec_php = on_command('run php', priority=5)

@exec_php.handle()
async def _(bot: Bot, event: Event, state: dict):
    args = unescape(str(event.message))
    r = await run_and_get_result('php:7.4-cli', ['php', '-r', args])
    if len(r) > 500:
        r = await upload_logs(r)
    r = (event.sender['card'] or event.sender['nickname']) + '\n\n' + (r or '<empty output>')
    await exec_python.finish(r)

使用方法：

run py
print('hello nonebot')

[stdrc]

赞👍，可以考虑出个直接调 glot.io 的版本？

[hqshi]

这个确实不错，但是实际使用中有被注入的问题