tests.system.common.ai.example_sandbox_toolset_modal¶
End-to-end system test for SandboxToolset with the Modal backend.
Needs Modal credentials on the worker: modal token new locally, or
MODAL_TOKEN_ID and MODAL_TOKEN_SECRET in the environment.
Covers what only a live sandbox can show: that the four tools agree on one
filesystem, that a non-zero exit is output rather than a failure, that a command
hitting its deadline leaves the sandbox and its files intact (which is where Modal
differs from sbx), that the default spec really does deny egress, that none of
Airflow’s own environment crosses the boundary, and that teardown terminates the
sandbox. A second task checks the address allowlist: a listed address connects on
any port, an unlisted one is dropped, and hostnames still resolve.