diff options
| author | OpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com> | 2021-05-04 14:46:17 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-05-04 14:46:17 -0400 |
| commit | 8eefca5a257121b177562742c972e39e1686140d (patch) | |
| tree | ca9a6892a9fe3dadb95087da0d4b994490bcc584 /test/system/170-run-userns.bats | |
| parent | af2418018b8a0d83734a7a329955f5a9938bdfbf (diff) | |
| parent | 9fd7ab50f82c7eaccd2b9daca84e516367f610a2 (diff) | |
| download | podman-8eefca5a257121b177562742c972e39e1686140d.tar.gz podman-8eefca5a257121b177562742c972e39e1686140d.tar.bz2 podman-8eefca5a257121b177562742c972e39e1686140d.zip | |
Merge pull request #10199 from edsantiago/system_tests_with_runc_override
System tests: honor $OCI_RUNTIME (for CI)
Diffstat (limited to 'test/system/170-run-userns.bats')
| -rw-r--r-- | test/system/170-run-userns.bats | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/test/system/170-run-userns.bats b/test/system/170-run-userns.bats index 2dc5b078f..eb6c4e259 100644 --- a/test/system/170-run-userns.bats +++ b/test/system/170-run-userns.bats @@ -6,22 +6,31 @@ load helpers +function _require_crun() { + runtime=$(podman_runtime) + if [[ $runtime != "crun" ]]; then + skip "runtime is $runtime; keep-groups requires crun" + fi +} + @test "podman --group-add keep-groups while in a userns" { - skip_if_rootless "choot is not allowed in rootless mode" + skip_if_rootless "chroot is not allowed in rootless mode" skip_if_remote "--group-add keep-groups not supported in remote mode" + _require_crun run chroot --groups 1234 / ${PODMAN} run --uidmap 0:200000:5000 --group-add keep-groups $IMAGE id is "$output" ".*65534(nobody)" "Check group leaked into user namespace" } @test "podman --group-add keep-groups while not in a userns" { - skip_if_rootless "choot is not allowed in rootless mode" + skip_if_rootless "chroot is not allowed in rootless mode" skip_if_remote "--group-add keep-groups not supported in remote mode" + _require_crun run chroot --groups 1234,5678 / ${PODMAN} run --group-add keep-groups $IMAGE id is "$output" ".*1234" "Check group leaked into container" } @test "podman --group-add without keep-groups while in a userns" { - skip_if_rootless "choot is not allowed in rootless mode" + skip_if_rootless "chroot is not allowed in rootless mode" skip_if_remote "--group-add keep-groups not supported in remote mode" run chroot --groups 1234,5678 / ${PODMAN} run --uidmap 0:200000:5000 --group-add 457 $IMAGE id is "$output" ".*457" "Check group leaked into container" |