mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 22:37:14 +08:00
Aleksa Sarai
eb5bd4fa6a
Enable several previously disabled tests (for the idmap execution mode) for rootless containers, in addition to making all tests use the additional mappings. At the moment there's no strong need to add any additional tests purely for rootless_idmap. Signed-off-by: Aleksa Sarai <asarai@suse.de>
119 lines
3.2 KiB
Bash
119 lines
3.2 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load helpers
|
|
|
|
function setup() {
|
|
teardown_busybox
|
|
setup_busybox
|
|
}
|
|
|
|
function teardown() {
|
|
teardown_busybox
|
|
}
|
|
|
|
@test "runc run [tty ptsname]" {
|
|
# Replace sh script with readlink.
|
|
sed -i 's|"sh"|"sh", "-c", "for file in /proc/self/fd/[012]; do readlink $file; done"|' config.json
|
|
|
|
# run busybox
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
[[ ${lines[0]} =~ /dev/pts/+ ]]
|
|
[[ ${lines[1]} =~ /dev/pts/+ ]]
|
|
[[ ${lines[2]} =~ /dev/pts/+ ]]
|
|
}
|
|
|
|
@test "runc run [tty owner]" {
|
|
# tty chmod is not doable in rootless containers without idmap.
|
|
# TODO: this can be made as a change to the gid test.
|
|
[[ "$ROOTLESS" -ne 0 ]] && requires rootless_idmap
|
|
|
|
# Replace sh script with stat.
|
|
sed -i 's/"sh"/"sh", "-c", "stat -c %u:%g $(tty) | tr : \\\\\\\\n"/' config.json
|
|
|
|
# run busybox
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
[[ ${lines[0]} =~ 0 ]]
|
|
# This is set by the default config.json (it corresponds to the standard tty group).
|
|
[[ ${lines[1]} =~ 5 ]]
|
|
}
|
|
|
|
@test "runc run [tty owner] ({u,g}id != 0)" {
|
|
# tty chmod is not doable in rootless containers without idmap.
|
|
[[ "$ROOTLESS" -ne 0 ]] && requires rootless_idmap
|
|
|
|
# replace "uid": 0 with "uid": 1000
|
|
# and do a similar thing for gid.
|
|
sed -i 's;"uid": 0;"uid": 1000;g' config.json
|
|
sed -i 's;"gid": 0;"gid": 100;g' config.json
|
|
|
|
# Replace sh script with stat.
|
|
sed -i 's/"sh"/"sh", "-c", "stat -c %u:%g $(tty) | tr : \\\\\\\\n"/' config.json
|
|
|
|
# run busybox
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
[[ ${lines[0]} =~ 1000 ]]
|
|
# This is set by the default config.json (it corresponds to the standard tty group).
|
|
[[ ${lines[1]} =~ 5 ]]
|
|
}
|
|
|
|
@test "runc exec [tty ptsname]" {
|
|
# run busybox detached
|
|
runc run -d --console-socket $CONSOLE_SOCKET test_busybox
|
|
[ "$status" -eq 0 ]
|
|
|
|
# make sure we're running
|
|
testcontainer test_busybox running
|
|
|
|
# run the exec
|
|
runc exec test_busybox sh -c 'for file in /proc/self/fd/[012]; do readlink $file; done'
|
|
[ "$status" -eq 0 ]
|
|
[[ ${lines[0]} =~ /dev/pts/+ ]]
|
|
[[ ${lines[1]} =~ /dev/pts/+ ]]
|
|
[[ ${lines[2]} =~ /dev/pts/+ ]]
|
|
}
|
|
|
|
@test "runc exec [tty owner]" {
|
|
# tty chmod is not doable in rootless containers without idmap.
|
|
# TODO: this can be made as a change to the gid test.
|
|
[[ "$ROOTLESS" -ne 0 ]] && requires rootless_idmap
|
|
|
|
# run busybox detached
|
|
runc run -d --console-socket $CONSOLE_SOCKET test_busybox
|
|
[ "$status" -eq 0 ]
|
|
|
|
# make sure we're running
|
|
testcontainer test_busybox running
|
|
|
|
# run the exec
|
|
runc exec test_busybox sh -c 'stat -c %u:%g $(tty) | tr : \\n'
|
|
[ "$status" -eq 0 ]
|
|
[[ ${lines[0]} =~ 0 ]]
|
|
[[ ${lines[1]} =~ 5 ]]
|
|
}
|
|
|
|
@test "runc exec [tty owner] ({u,g}id != 0)" {
|
|
# tty chmod is not doable in rootless containers without idmap.
|
|
[[ "$ROOTLESS" -ne 0 ]] && requires rootless_idmap
|
|
|
|
# replace "uid": 0 with "uid": 1000
|
|
# and do a similar thing for gid.
|
|
sed -i 's;"uid": 0;"uid": 1000;g' config.json
|
|
sed -i 's;"gid": 0;"gid": 100;g' config.json
|
|
|
|
# run busybox detached
|
|
runc run -d --console-socket $CONSOLE_SOCKET test_busybox
|
|
[ "$status" -eq 0 ]
|
|
|
|
# make sure we're running
|
|
testcontainer test_busybox running
|
|
|
|
# run the exec
|
|
runc exec test_busybox sh -c 'stat -c %u:%g $(tty) | tr : \\n'
|
|
[ "$status" -eq 0 ]
|
|
[[ ${lines[0]} =~ 1000 ]]
|
|
[[ ${lines[1]} =~ 5 ]]
|
|
}
|