mirror of
https://github.com/containers/podman.git
synced 2025-11-30 01:58:46 +08:00
container: do not create .containerenv with -v SRC:/run
if /run is on a volume do not create the file /run/.containerenv as it would leak outside of the container. Closes: https://github.com/containers/podman/issues/14577 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
This commit is contained in:
@@ -908,6 +908,20 @@ USER testuser`, fedoraMinimal)
|
||||
Expect(session.OutputToString()).To(Equal(perms))
|
||||
})
|
||||
|
||||
It("podman run with -v $SRC:/run does not create /run/.containerenv", func() {
|
||||
mountSrc := filepath.Join(podmanTest.TempDir, "vol-test1")
|
||||
err := os.MkdirAll(mountSrc, 0755)
|
||||
Expect(err).To(BeNil())
|
||||
|
||||
session := podmanTest.Podman([]string{"run", "-v", mountSrc + ":/run", ALPINE, "true"})
|
||||
session.WaitWithDefaultTimeout()
|
||||
Expect(session).Should(Exit(0))
|
||||
|
||||
// the file should not have been created
|
||||
_, err = os.Stat(filepath.Join(mountSrc, ".containerenv"))
|
||||
Expect(err).To(Not(BeNil()))
|
||||
})
|
||||
|
||||
It("podman volume with uid and gid works", func() {
|
||||
volName := "testVol"
|
||||
volCreate := podmanTest.Podman([]string{"volume", "create", "--opt", "o=uid=1000", volName})
|
||||
|
||||
Reference in New Issue
Block a user