Disable sandboxing for CI runs (#99)

* Update sandbox.go

* Update main.go

* Update sandbox.go

* gofmt

* bump omegajail

cmd/omegaup-runner/main.go

@@ -730,6 +730,8 @@ func main() {
 		if *oneshot == "ci" {
 			// Allow sigsys to use the fallback detector when running in CI.
 			oj.AllowSigsysFallback = true
+			// Disable sandboxing when running inside Docker.
+			oj.DisableSandboxing = true
 		}
 		sandbox = oj
 	}

docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.pkg.github.com/omegaup/omegajail/omegajail-builder-rootfs-runtime:v3.9.0 AS base
+FROM docker.pkg.github.com/omegaup/omegajail/omegajail-builder-rootfs-runtime:v3.9.4 AS base
 
 FROM base AS builder
 

runner/sandbox.go

@@ -140,6 +140,8 @@ type OmegajailSandbox struct {
 	// AllowSigsysFallback allows omegajail to use the previous implementation of
 	// the sigsys detector if it's running on an older pre-5.13 kernel.
 	AllowSigsysFallback bool
+
+	DisableSandboxing bool
 }
 
 // NewOmegajailSandbox creates a new OmegajailSandbox.
@@ -372,6 +374,9 @@ func (o *OmegajailSandbox) invokeOmegajail(ctx *common.Context, omegajailParams
 	if o.AllowSigsysFallback {
 		omegajailFullParams = append(omegajailFullParams, "--allow-sigsys-fallback")
 	}
+	if o.DisableSandboxing {
+		omegajailFullParams = append(omegajailFullParams, "--disable-sandboxing")
+	}
 	omegajailFullParams = append(omegajailFullParams, omegajailParams...)
 	ctx.Log.Debug(
 		"invoking",