windows: support sandboxing [blocking #5640]

[laszlocsomor]

Description of the problem / feature request:

This is an umbrella bug for the feature request of supporting sandboxing on Windows.

What operating system are you running Bazel on?

Windows 10

What's the output of bazel info release?

release 0.13.0

Have you found anything relevant by searching the web?

Microsoft recently opensourced Detours, which could be useful: https://github.com/Microsoft/Detours

[j3parker]

I'm sure you're aware, but Windows has something called the Host Compute Service which is used to implement containers for things like Docker.

This blog post has the high level picture and they link to wrappers+sample code for C# and Go (which looks more complete and is what Docker actually uses.)

Maybe something from there would be useful?

[laszlocsomor]

I wasn't aware, thanks for the info! Could be useful indeed. Though supporting the Docker-based sandbox strategy on Windows may be more convenient than implementing native sandboxing.

[j3parker]

Cool! Makes sense.

[ilya-klyuchnikov]

FYI: https://github.com/Microsoft/BuildXL has an implementation of Windows Sandboxing

[laszlocsomor]

@ilya-klyuchnikov -- Thanks for the heads-up! Very interesting, I'll take a look and try to build it.

[jin]

@laszlocsomor could you please add a priority to this issue?

[laszlocsomor]

Setting priority to p3 -- I don't expect much focus on this before Bazel 1.0 (though this is not ruled out either).