mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 06:03:57 +08:00
Aleksa Sarai
c045886f71
Previously, all of our userns tests worked around the remapping issue by creating the paths that runc would attempt to create (like /proc). However, this isn't really accurate to how real userns containers are created, so it's much better to actually remap the rootfs. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
78 lines
2.1 KiB
Bash
78 lines
2.1 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load helpers
|
|
|
|
function setup() {
|
|
setup_busybox
|
|
}
|
|
|
|
function teardown() {
|
|
teardown_bundle
|
|
}
|
|
|
|
@test "runc run [timens offsets with no timens]" {
|
|
requires timens
|
|
|
|
update_config '.process.args = ["cat", "/proc/self/timens_offsets"]'
|
|
update_config '.linux.namespaces = .linux.namespace | map(select(.type != "time"))'
|
|
update_config '.linux.timeOffsets = {
|
|
"monotonic": { "secs": 7881, "nanosecs": 2718281 },
|
|
"boottime": { "secs": 1337, "nanosecs": 3141519 }
|
|
}'
|
|
|
|
runc run test_busybox
|
|
[ "$status" -ne 0 ]
|
|
}
|
|
|
|
@test "runc run [timens with no offsets]" {
|
|
requires timens
|
|
|
|
update_config '.process.args = ["cat", "/proc/self/timens_offsets"]'
|
|
update_config '.linux.namespaces += [{"type": "time"}]
|
|
| .linux.timeOffsets = null'
|
|
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
# Default offsets are 0.
|
|
grep -E '^monotonic\s+0\s+0$' <<<"$output"
|
|
grep -E '^boottime\s+0\s+0$' <<<"$output"
|
|
}
|
|
|
|
@test "runc run [simple timens]" {
|
|
requires timens
|
|
|
|
update_config '.process.args = ["cat", "/proc/self/timens_offsets"]'
|
|
update_config '.linux.namespaces += [{"type": "time"}]
|
|
| .linux.timeOffsets = {
|
|
"monotonic": { "secs": 7881, "nanosecs": 2718281 },
|
|
"boottime": { "secs": 1337, "nanosecs": 3141519 }
|
|
}'
|
|
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
grep -E '^monotonic\s+7881\s+2718281$' <<<"$output"
|
|
grep -E '^boottime\s+1337\s+3141519$' <<<"$output"
|
|
}
|
|
|
|
@test "runc run [simple timens + userns]" {
|
|
requires root
|
|
requires timens
|
|
|
|
update_config ' .linux.namespaces += [{"type": "user"}]
|
|
| .linux.uidMappings += [{"hostID": 100000, "containerID": 0, "size": 65534}]
|
|
| .linux.gidMappings += [{"hostID": 200000, "containerID": 0, "size": 65534}] '
|
|
remap_rootfs
|
|
|
|
update_config '.process.args = ["cat", "/proc/self/timens_offsets"]'
|
|
update_config '.linux.namespaces += [{"type": "time"}]
|
|
| .linux.timeOffsets = {
|
|
"monotonic": { "secs": 7881, "nanosecs": 2718281 },
|
|
"boottime": { "secs": 1337, "nanosecs": 3141519 }
|
|
}'
|
|
|
|
runc run test_busybox
|
|
[ "$status" -eq 0 ]
|
|
grep -E '^monotonic\s+7881\s+2718281$' <<<"$output"
|
|
grep -E '^boottime\s+1337\s+3141519$' <<<"$output"
|
|
}
|