Merge pull request #11353 from flouthoc/resolve-workdir-after-mounts

container: resolve workdir during initialization after all the mounts are completed.
This commit is contained in:
OpenShift Merge Robot
2021-08-30 18:12:29 -04:00
committed by GitHub
3 changed files with 25 additions and 5 deletions

View File

@ -1072,6 +1072,11 @@ func (c *Container) init(ctx context.Context, retainRetries bool) error {
return err
}
// Make sure the workdir exists while initializing container
if err := c.resolveWorkDir(); err != nil {
return err
}
// Save the OCI newSpec to disk
if err := c.saveSpec(newSpec); err != nil {
return err

View File

@ -176,11 +176,6 @@ func (c *Container) prepare() error {
return err
}
// Make sure the workdir exists
if err := c.resolveWorkDir(); err != nil {
return err
}
return nil
}

View File

@ -222,6 +222,26 @@ var _ = Describe("Podman run with volumes", func() {
Expect(matches[0]).To(Not(ContainSubstring("nosuid")))
})
// Container should start when workdir is overlayed volume
It("podman run with volume mounted as overlay and used as workdir", func() {
SkipIfRemote("Overlay volumes only work locally")
if os.Getenv("container") != "" {
Skip("Overlay mounts not supported when running in a container")
}
if rootless.IsRootless() {
if _, err := exec.LookPath("fuse-overlayfs"); err != nil {
Skip("Fuse-Overlayfs required for rootless overlay mount test")
}
}
mountPath := filepath.Join(podmanTest.TempDir, "secrets")
os.Mkdir(mountPath, 0755)
//Container should be able to start with custom overlayed volume
session := podmanTest.Podman([]string{"run", "--rm", "-v", mountPath + ":/data:O", "--workdir=/data", ALPINE, "echo", "hello"})
session.WaitWithDefaultTimeout()
Expect(session).Should(Exit(0))
})
It("podman run with noexec can't exec", func() {
session := podmanTest.Podman([]string{"run", "--rm", "-v", "/bin:/hostbin:noexec", ALPINE, "/hostbin/ls", "/"})
session.WaitWithDefaultTimeout()