mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 06:03:57 +08:00
Kir Kolyshkin
41670e21f0
1. Get rid of fixed ROOT, *_BUNDLE, and CONSOLE_SOCKET dirs. Now they are temporary directories created in setup_bundle. 2. Automate containers cleanup: instead of having to specify all containers to be removed, list and destroy everything (which is now possible since every test case has its own unique root). 3. Randomize cgroup paths so two tests running in parallel won't use the same cgroup. Now it's theoretically possible to execute tests in parallel. Practically it's not possible yet because bats uses GNU parallel, which do not provide a terminal for whatever it executes, and many runc tests (all those that run containers with terminal: true) needs a tty. This may possibly be addressed later. Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
59 lines
1.4 KiB
Bash
59 lines
1.4 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load helpers
|
|
|
|
function setup() {
|
|
setup_busybox
|
|
}
|
|
|
|
function teardown() {
|
|
teardown_bundle
|
|
}
|
|
|
|
# Test case for https://github.com/opencontainers/runc/pull/2086
|
|
@test "runc exec --user with no access to cwd" {
|
|
requires root
|
|
|
|
chown 42 rootfs/root
|
|
chmod 700 rootfs/root
|
|
|
|
update_config ' .process.cwd = "/root"
|
|
| .process.user.uid = 42
|
|
| .process.args |= ["sleep", "1h"]'
|
|
|
|
runc run -d --console-socket "$CONSOLE_SOCKET" test_busybox
|
|
[ "$status" -eq 0 ]
|
|
|
|
runc exec --user 0 test_busybox true
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
# Verify a cwd owned by the container user can be chdir'd to,
|
|
# even if runc doesn't have the privilege to do so.
|
|
@test "runc create sets up user before chdir to cwd" {
|
|
requires rootless rootless_idmap
|
|
|
|
# Some setup for this test (AUX_DIR and AUX_UID) is done
|
|
# by rootless.sh. Check that setup is done...
|
|
if [[ ! -d "$AUX_DIR" || -z "$AUX_UID" ]]; then
|
|
skip "bad/unset AUX_DIR/AUX_UID"
|
|
fi
|
|
# ... and is correct, i.e. the current user
|
|
# does not have permission to access AUX_DIR.
|
|
if ls -l "$AUX_DIR" 2>/dev/null; then
|
|
skip "bad AUX_DIR permissions"
|
|
fi
|
|
|
|
update_config ' .mounts += [{
|
|
source: "'"$AUX_DIR"'",
|
|
destination: "'"$AUX_DIR"'",
|
|
options: ["bind"]
|
|
}]
|
|
| .process.user.uid = '"$AUX_UID"'
|
|
| .process.cwd = "'"$AUX_DIR"'"
|
|
| .process.args |= ["ls", "'"$AUX_DIR"'"]'
|
|
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
}
|