mirror of
https://github.com/containers/podman.git
synced 2025-09-17 23:18:39 +08:00
ab29ff2f66
There is no reason to define the same code every time in each file, just use global nodes. This diff should speak for itself. CleanupSecrets()/Volume() no longer call Cleanup() directly, as the global AfterEach node will always call Cleanup() this is no longer necessary. If one AfterEach() node fails it will still run the others. Also always unset the CONTAINERS_CONF env vars. This prevents people from forgetting to unset it. And fix the special CONTAINERS_CONF logic in the system connection tests, we do not want to preserve CONTAINERS_CONF anyway so just remove this logic. Ginkgo orders the BeforeEach and AfterEach nodes. They will be executed from the outer-most defined to inner-most. This means our global BeforeEach is always first. Only then the inner one (in the Describe() function in each file). For AfterEach it is inverted, from the inner to the outer. Also see https://onsi.github.io/ginkgo/#organizing-specs-with-container-nodes Signed-off-by: Paul Holzinger <pholzing@redhat.com>
89 lines
3.2 KiB
Go
89 lines
3.2 KiB
Go
package integration
|
|
|
|
import (
|
|
"os"
|
|
|
|
. "github.com/onsi/ginkgo/v2"
|
|
. "github.com/onsi/gomega"
|
|
. "github.com/onsi/gomega/gexec"
|
|
)
|
|
|
|
// podman unshare --rootless-netns leaks the process by design.
|
|
// Running a container will cause the cleanup to kick in when this container gets stopped.
|
|
func cleanupRootlessSlirp4netns(p *PodmanTestIntegration) {
|
|
session := p.Podman([]string{"run", "--network", "bridge", ALPINE, "true"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(0))
|
|
}
|
|
|
|
var _ = Describe("Podman unshare", func() {
|
|
BeforeEach(func() {
|
|
if _, err := os.Stat("/proc/self/uid_map"); err != nil {
|
|
Skip("User namespaces not supported.")
|
|
}
|
|
|
|
if !isRootless() {
|
|
Skip("Use unshare in rootless only")
|
|
}
|
|
})
|
|
|
|
It("podman unshare", func() {
|
|
SkipIfRemote("podman-remote unshare is not supported")
|
|
userNS, _ := os.Readlink("/proc/self/ns/user")
|
|
session := podmanTest.Podman([]string{"unshare", "readlink", "/proc/self/ns/user"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(0))
|
|
Expect(session.OutputToString()).ToNot(ContainSubstring(userNS))
|
|
})
|
|
|
|
It("podman unshare --rootless-netns", func() {
|
|
SkipIfRemote("podman-remote unshare is not supported")
|
|
defer cleanupRootlessSlirp4netns(podmanTest)
|
|
session := podmanTest.Podman([]string{"unshare", "--rootless-netns", "ip", "addr"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(0))
|
|
Expect(session.OutputToString()).To(ContainSubstring("tap0"))
|
|
})
|
|
|
|
It("podman unshare exit codes", func() {
|
|
SkipIfRemote("podman-remote unshare is not supported")
|
|
session := podmanTest.Podman([]string{"unshare", "false"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(1))
|
|
Expect(session.OutputToString()).Should(Equal(""))
|
|
Expect(session.ErrorToString()).Should(Equal(""))
|
|
|
|
session = podmanTest.Podman([]string{"unshare", "/usr/bin/bogus"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(127))
|
|
Expect(session.OutputToString()).Should(Equal(""))
|
|
Expect(session.ErrorToString()).Should(ContainSubstring("no such file or directory"))
|
|
|
|
session = podmanTest.Podman([]string{"unshare", "bogus"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(127))
|
|
Expect(session.OutputToString()).Should(Equal(""))
|
|
Expect(session.ErrorToString()).Should(ContainSubstring("executable file not found in $PATH"))
|
|
|
|
session = podmanTest.Podman([]string{"unshare", "/usr"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(126))
|
|
Expect(session.OutputToString()).Should(Equal(""))
|
|
Expect(session.ErrorToString()).Should(ContainSubstring("permission denied"))
|
|
|
|
session = podmanTest.Podman([]string{"unshare", "--bogus"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(125))
|
|
Expect(session.OutputToString()).Should(Equal(""))
|
|
Expect(session.ErrorToString()).Should(ContainSubstring("unknown flag: --bogus"))
|
|
})
|
|
|
|
It("podman unshare check remote error", func() {
|
|
SkipIfNotRemote("check for podman-remote unshare error")
|
|
session := podmanTest.Podman([]string{"unshare"})
|
|
session.WaitWithDefaultTimeout()
|
|
Expect(session).Should(Exit(125))
|
|
Expect(session.ErrorToString()).To(Equal(`Error: cannot use command "podman-remote unshare" with the remote podman client`))
|
|
})
|
|
})
|