mirror of
https://github.com/containers/podman.git
synced 2025-05-17 23:26:08 +08:00
2e70d4201f
Testing `podman system check` requires that we have a way to intentionally introduce storage corruptions. Add a hidden `podman testing` command that provides the necessary internal logic in subcommands. Stub out the tunnel implementation for now. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
249 lines
11 KiB
Bash
249 lines
11 KiB
Bash
#!/usr/bin/env bats -*- bats -*-
|
|
#
|
|
# Creates errors that should be caught by `system check`, and verifies
|
|
# that they are caught and remedied, even if it requires discarding some
|
|
# data in read-write layers.
|
|
#
|
|
|
|
load helpers
|
|
|
|
@test "podman system check - unmanaged layers" {
|
|
run_podman_testing create-storage-layer
|
|
layerID="$output"
|
|
run_podman_testing create-storage-layer --parent=$layerID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "layer in lower level storage driver not accounted for" "output from 'podman system check' with unmanaged layers"
|
|
run_podman system check -r
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - unused layers" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
run_podman_testing create-layer --parent=$layerID
|
|
run_podman system check
|
|
run_podman 125 system check -m 0
|
|
assert "$output" =~ "layer not referenced" "output from 'podman system check' with unused layers"
|
|
run_podman system check -m 0 -r
|
|
run_podman system check -m 0
|
|
}
|
|
|
|
@test "podman system check - layer content digest changed" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
make_layer_blob 1 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing modify-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman 125 system check
|
|
assert "$output" =~ "checksum failed" "output from 'podman system check' with modified layer contents"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - layer content added" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
make_layer_blob 100 101 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing modify-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman 125 system check
|
|
assert "$output" =~ "content modified" "output from 'podman system check' with unexpected content added to layer"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - storage image layer missing" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
run_podman_testing remove-layer --layer=$layerID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "image layer is missing" "output from 'podman system check' with missing layer"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - storage container image missing" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
run_podman_testing remove-image --image=$imageID
|
|
run_podman 125 system check -m 0
|
|
assert "$output" =~ "image missing" "output from 'podman system check' with missing image"
|
|
run_podman 125 system check -r -m 0
|
|
run_podman 0+w system check -r -f -m 0
|
|
run_podman system check -m 0
|
|
}
|
|
|
|
@test "podman system check - storage layer data missing" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing create-layer-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --layer=$layerID
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
run_podman_testing remove-layer-data --key=foo --layer=$layerID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "layer data item is missing" "output from 'podman system check' with missing layer data"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - storage image data missing" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing create-image-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --image=$imageID
|
|
run_podman create $imageID
|
|
run_podman_testing remove-image-data --key=foo --image=$imageID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "image data item is missing" "output from 'podman system check' with missing image data"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - storage image data modified" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing create-image-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --image=$imageID
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing modify-image-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --image=$imageID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "image data item has incorrect" "output from 'podman system check' with modified image data"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
}
|
|
|
|
@test "podman system check - container data missing" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
containerID="$output"
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing create-container-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --container=$containerID
|
|
run_podman_testing remove-container-data --key=foo --container=$containerID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "container data item is missing" "output from 'podman system check' with missing container data"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
run_podman rmi $imageID
|
|
}
|
|
|
|
@test "podman system check - container data modified" {
|
|
run_podman_testing create-layer
|
|
layerID="$output"
|
|
make_layer_blob 8 ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing populate-layer --layer=$layerID --file=${PODMAN_TMPDIR}/archive.tar
|
|
run_podman_testing create-image --layer=$layerID
|
|
imageID="$output"
|
|
testing_make_image_metadata_for_layer_blobs $imageID ${PODMAN_TMPDIR}/archive.tar
|
|
run_podman create $imageID
|
|
containerID="$output"
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing create-container-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --container=$containerID
|
|
make_random_file ${PODMAN_TMPDIR}/random-data.bin
|
|
run_podman_testing modify-container-data --key=foo --file=${PODMAN_TMPDIR}/random-data.bin --container=$containerID
|
|
run_podman 125 system check
|
|
assert "$output" =~ "container data item has incorrect" "output from 'podman system check' with modified container data"
|
|
run_podman 125 system check -r
|
|
run_podman 0+w system check -r -f
|
|
run_podman system check
|
|
run_podman rmi $imageID
|
|
}
|
|
|
|
function make_layer_blob() {
|
|
local tmpdir=$(mktemp -d --tmpdir=${PODMAN_TMPDIR} make_layer_blob.XXXXXX)
|
|
local blobfile
|
|
local seqargs
|
|
for arg in "${@}" ; do
|
|
seqargs="${blobfile:+$seqargs $blobfile}"
|
|
blobfile="$arg"
|
|
done
|
|
seqargs="${seqargs:-8}"
|
|
local filelist=
|
|
for file in $(seq ${seqargs}); do
|
|
dd if=/dev/urandom of="$tmpdir/file$file" bs=1 count=$((1024 + $file)) status=none
|
|
filelist="$filelist file$file"
|
|
done
|
|
tar -c --owner=root:0 --group=root:0 -f "$blobfile" -C "$tmpdir" $filelist
|
|
}
|
|
|
|
function testing_make_image_metadata_for_layer_blobs() {
|
|
local tmpdir=$(mktemp -d --tmpdir=${PODMAN_TMPDIR} make_image_metadata.XXXXXX)
|
|
local imageID=$1
|
|
shift
|
|
echo '{"config":{},"rootfs":{"type":"layers","diff_ids":[' > $tmpdir/config.json
|
|
echo '{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","layers":[' > $tmpdir/manifest
|
|
local comma=
|
|
for blob in "$@" ; do
|
|
local sum=$(sha256sum $blob)
|
|
sum=${sum%% *}
|
|
local size=$(wc -c $blob)
|
|
size=${size%% *}
|
|
echo $comma '"sha256:'$sum'"' >> $tmpdir/config.json
|
|
echo $comma '{"digest":"sha256:'$sum'","size":'$size',"mediaType":"application/vnd.oci.image.layer.v1.tar"}' >> $tmpdir/manifest
|
|
comma=,
|
|
done
|
|
echo ']}}' >> $tmpdir/config.json
|
|
sum=$(sha256sum $tmpdir/config.json)
|
|
sum=${sum%% *}
|
|
size=$(wc -c $tmpdir/config.json)
|
|
size=${size%% *}
|
|
echo '],"config":{"digest":"sha256:'$sum'","size":'$size',"mediaType":"application/vnd.oci.image.config.v1+json"}}' >> $tmpdir/manifest
|
|
run_podman_testing create-image-data -i $imageID -k sha256:$sum -f $tmpdir/config.json
|
|
sum=$(sha256sum $tmpdir/manifest)
|
|
sum=${sum%% *}
|
|
run_podman_testing create-image-data -i $imageID -k manifest-sha256:$sum -f $tmpdir/manifest
|
|
run_podman_testing create-image-data -i $imageID -k manifest -f $tmpdir/manifest
|
|
}
|
|
|
|
# vim: filetype=sh
|