diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2020-09-02 07:49:11 -0400 |
|---|---|---|
| committer | Daniel J Walsh <dwalsh@redhat.com> | 2020-09-02 08:00:22 -0400 |
| commit | d68a6b52ecd5354dccfb2f62dd7b06518200fa28 (patch) | |
| tree | 4e2bbd2c71bf97bb6d75056c3f0606269f4c4771 /test/e2e/run_test.go | |
| parent | 1184cdf03d8464451d36b24643e57b65a8b97980 (diff) | |
| download | podman-d68a6b52ecd5354dccfb2f62dd7b06518200fa28.tar.gz podman-d68a6b52ecd5354dccfb2f62dd7b06518200fa28.tar.bz2 podman-d68a6b52ecd5354dccfb2f62dd7b06518200fa28.zip | |
We should not be mounting /run as noexec when run with --systemd
The system defaults /run to "exec" mode, and we default --read-only
mounts on /run to "exec", so --systemd should follow suit.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Diffstat (limited to 'test/e2e/run_test.go')
| -rw-r--r-- | test/e2e/run_test.go | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/test/e2e/run_test.go b/test/e2e/run_test.go index 91b0d3e48..1ac753201 100644 --- a/test/e2e/run_test.go +++ b/test/e2e/run_test.go @@ -919,6 +919,14 @@ USER mail` Expect(session.OutputToString()).To(Not(ContainSubstring("/dev/shm type tmpfs (ro,"))) }) + It("podman run readonly container should NOT mount /run noexec", func() { + session := podmanTest.Podman([]string{"run", "--read-only", ALPINE, "sh", "-c", "mount | grep \"/run \""}) + session.WaitWithDefaultTimeout() + Expect(session.ExitCode()).To(Equal(0)) + + Expect(session.OutputToString()).To(Not(ContainSubstring("noexec"))) + }) + It("podman run with bad healthcheck retries", func() { session := podmanTest.Podman([]string{"run", "-dt", "--health-cmd", "[\"foo\"]", "--health-retries", "0", ALPINE, "top"}) session.Wait() |