diff options
author | Paul Holzinger <paul.holzinger@web.de> | 2020-11-17 21:12:45 +0100 |
---|---|---|
committer | Paul Holzinger <paul.holzinger@web.de> | 2020-11-17 21:18:27 +0100 |
commit | d4446501f3245a87a605bea403710954f0400fb5 (patch) | |
tree | d636225b50c7c6ef7ce28cd8e0a988c01bb26b26 /test/e2e/run_security_labels.go | |
parent | 65880e556314d1d8cb3cf12e20666b823eab8c76 (diff) | |
download | podman-d4446501f3245a87a605bea403710954f0400fb5.tar.gz podman-d4446501f3245a87a605bea403710954f0400fb5.tar.bz2 podman-d4446501f3245a87a605bea403710954f0400fb5.zip |
Rename e2e test files to include _test.go suffix
The test were working fine. Just my IDE doesn't like the files
without the suffix and I don't like red errors.
Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
Diffstat (limited to 'test/e2e/run_security_labels.go')
-rw-r--r-- | test/e2e/run_security_labels.go | 151 |
1 files changed, 0 insertions, 151 deletions
diff --git a/test/e2e/run_security_labels.go b/test/e2e/run_security_labels.go deleted file mode 100644 index 0c5621e3f..000000000 --- a/test/e2e/run_security_labels.go +++ /dev/null @@ -1,151 +0,0 @@ -package integration - -import ( - "os" - "strings" - - . "github.com/containers/podman/v2/test/utils" - . "github.com/onsi/ginkgo" - . "github.com/onsi/gomega" -) - -var _ = Describe("Podman generate kube", func() { - var ( - tempdir string - err error - podmanTest *PodmanTestIntegration - ) - - BeforeEach(func() { - tempdir, err = CreateTempDirInTempDir() - if err != nil { - os.Exit(1) - } - podmanTest = PodmanTestCreate(tempdir) - podmanTest.Setup() - podmanTest.SeedImages() - - }) - - AfterEach(func() { - podmanTest.Cleanup() - f := CurrentGinkgoTestDescription() - processTestResult(f) - }) - - It("podman security labels", func() { - test1 := podmanTest.Podman([]string{"create", "--label", "io.containers.capabilities=setuid,setgid", "--name", "test1", "alpine", "echo", "test1"}) - test1.WaitWithDefaultTimeout() - Expect(test1.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test1"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Equal("CAP_SETUID,CAP_SETGID")) - }) - - It("podman bad security labels", func() { - test1 := podmanTest.Podman([]string{"create", "--label", "io.containers.capabilities=sys_admin", "--name", "test1", "alpine", "echo", "test1"}) - test1.WaitWithDefaultTimeout() - Expect(test1.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test1"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Not(Equal("CAP_SYS_ADMIN"))) - }) - - It("podman --cap-add sys_admin security labels", func() { - test1 := podmanTest.Podman([]string{"create", "--cap-add", "SYS_ADMIN", "--label", "io.containers.capabilities=sys_admin", "--name", "test1", "alpine", "echo", "test1"}) - test1.WaitWithDefaultTimeout() - Expect(test1.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test1"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Equal("CAP_SYS_ADMIN")) - }) - - It("podman --cap-drop all sys_admin security labels", func() { - test1 := podmanTest.Podman([]string{"create", "--cap-drop", "all", "--label", "io.containers.capabilities=sys_admin", "--name", "test1", "alpine", "echo", "test1"}) - test1.WaitWithDefaultTimeout() - Expect(test1.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test1"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Equal("")) - }) - - It("podman security labels from image", func() { - test1 := podmanTest.Podman([]string{"create", "--name", "test1", "alpine", "echo", "test1"}) - test1.WaitWithDefaultTimeout() - Expect(test1.ExitCode()).To(BeZero()) - - commit := podmanTest.Podman([]string{"commit", "-c", "label=io.containers.capabilities=sys_chroot,setuid", "test1", "image1"}) - commit.WaitWithDefaultTimeout() - Expect(commit.ExitCode()).To(BeZero()) - - image1 := podmanTest.Podman([]string{"create", "--name", "test2", "image1", "echo", "test1"}) - image1.WaitWithDefaultTimeout() - Expect(image1.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test2"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Equal("CAP_SYS_CHROOT,CAP_SETUID")) - - }) - - It("podman --privileged security labels", func() { - pull := podmanTest.Podman([]string{"create", "--privileged", "--label", "io.containers.capabilities=setuid,setgid", "--name", "test1", "alpine", "echo", "test"}) - pull.WaitWithDefaultTimeout() - Expect(pull.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test1"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Not(Equal("CAP_SETUID,CAP_SETGID"))) - }) - - It("podman container runlabel (podman --version)", func() { - SkipIfRemote("runlabel not supported on podman-remote") - PodmanDockerfile := ` -FROM alpine:latest -LABEL io.containers.capabilities=chown,kill` - - image := "podman-caps:podman" - podmanTest.BuildImage(PodmanDockerfile, image, "false") - - test1 := podmanTest.Podman([]string{"create", "--name", "test1", image, "echo", "test1"}) - test1.WaitWithDefaultTimeout() - Expect(test1.ExitCode()).To(BeZero()) - - inspect := podmanTest.Podman([]string{"inspect", "test1"}) - inspect.WaitWithDefaultTimeout() - Expect(inspect.ExitCode()).To(Equal(0)) - - ctr := inspect.InspectContainerToJSON() - caps := strings.Join(ctr[0].EffectiveCaps, ",") - Expect(caps).To(Equal("CAP_CHOWN,CAP_KILL")) - }) - -}) |