mirror of
https://github.com/containers/podman.git
synced 2025-08-06 19:44:14 +08:00
0a39ad196c
Add a new --rootless-cni option to podman unshare to also join the rootless-cni network namespace. This is useful if you want to connect to a rootless container via IP address. This is only possible from the rootless-cni namespace and not from the host namespace. This option also helps to debug problems in the rootless-cni namespace. Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
60 lines
1.5 KiB
Go
60 lines
1.5 KiB
Go
package integration
|
|
|
|
import (
|
|
"os"
|
|
|
|
. "github.com/containers/podman/v3/test/utils"
|
|
. "github.com/onsi/ginkgo"
|
|
. "github.com/onsi/gomega"
|
|
)
|
|
|
|
var _ = Describe("Podman unshare", func() {
|
|
var (
|
|
tempdir string
|
|
err error
|
|
podmanTest *PodmanTestIntegration
|
|
)
|
|
BeforeEach(func() {
|
|
SkipIfRemote("podman-remote unshare is not supported")
|
|
if _, err := os.Stat("/proc/self/uid_map"); err != nil {
|
|
Skip("User namespaces not supported.")
|
|
}
|
|
|
|
if os.Geteuid() == 0 {
|
|
Skip("Use unshare in rootless only")
|
|
}
|
|
|
|
tempdir, err = CreateTempDirInTempDir()
|
|
if err != nil {
|
|
os.Exit(1)
|
|
}
|
|
podmanTest = PodmanTestCreate(tempdir)
|
|
podmanTest.CgroupManager = "cgroupfs"
|
|
podmanTest.StorageOptions = ROOTLESS_STORAGE_OPTIONS
|
|
podmanTest.Setup()
|
|
podmanTest.SeedImages()
|
|
})
|
|
|
|
AfterEach(func() {
|
|
podmanTest.Cleanup()
|
|
f := CurrentGinkgoTestDescription()
|
|
processTestResult(f)
|
|
})
|
|
|
|
It("podman unshare", func() {
|
|
userNS, _ := os.Readlink("/proc/self/ns/user")
|
|
session := podmanTest.Podman([]string{"unshare", "readlink", "/proc/self/ns/user"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session.ExitCode()).To(Equal(0))
|
|
ok, _ := session.GrepString(userNS)
|
|
Expect(ok).To(BeFalse())
|
|
})
|
|
|
|
It("podman unshare --rootles-cni", func() {
|
|
session := podmanTest.Podman([]string{"unshare", "--rootless-cni", "ip", "addr"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session.ExitCode()).To(Equal(0))
|
|
Expect(session.OutputToString()).To(ContainSubstring("tap0"))
|
|
})
|
|
})
|