summaryrefslogtreecommitdiff
path: root/test/test_podman_baseline.sh
diff options
context:
space:
mode:
authorTomSweeneyRedHat <tsweeney@redhat.com>2018-07-21 18:53:43 -0400
committerAtomic Bot <atomic-devel@projectatomic.io>2018-07-23 12:38:17 +0000
commiteb17182ecf3a4cdd55b87b7809791833200fcb2b (patch)
tree56ccff0979e8faf83f22fa302dd9f1db56925324 /test/test_podman_baseline.sh
parenteee0e97deb4f0d166c829b80d8114ad0664c50d4 (diff)
downloadpodman-eb17182ecf3a4cdd55b87b7809791833200fcb2b.tar.gz
podman-eb17182ecf3a4cdd55b87b7809791833200fcb2b.tar.bz2
podman-eb17182ecf3a4cdd55b87b7809791833200fcb2b.zip
Add OnBuild and usernamespace test to baseline
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com> Closes: #1127 Approved by: mheon
Diffstat (limited to 'test/test_podman_baseline.sh')
-rwxr-xr-xtest/test_podman_baseline.sh171
1 files changed, 147 insertions, 24 deletions
diff --git a/test/test_podman_baseline.sh b/test/test_podman_baseline.sh
index 144314358..72999c5d9 100755
--- a/test/test_podman_baseline.sh
+++ b/test/test_podman_baseline.sh
@@ -168,32 +168,10 @@ then
fi
########
-# Build Dockerfile
-########
-FILE=./Dockerfile
-/bin/cat <<EOM >$FILE
-FROM docker/whalesay:latest
-RUN apt-get -y update && apt-get install -y fortunes
-CMD /usr/games/fortune -a | cowsay
-EOM
-chmod +x $FILE
-
-########
-# Build with the Dockerfile
-########
-podman build -f Dockerfile -t whale-says
-
-########
-# Run the container to see what the whale says
-########
-podman run whale-says
-
-########
# Clean up Podman
########
podman rm --all
podman rmi --all
-rm ./Dockerfile
########
# Set up xfs mount for overlay quota
@@ -209,7 +187,6 @@ losetup $device $TMPDIR/virtfs
mkfs.xfs $device
mount -t xfs -o prjquota $device $TMPDIR
-
########
# Expected to succeed
########
@@ -235,10 +212,156 @@ else
fi
########
-# Clean up Podman and /tmp
+# Clean up Podman
########
podman rm --all
podman rmi --all
umount $TMPDIR -l
losetup -d $device
rm -rf /tmp/podman_test
+
+########
+# Prep for UserNamespace testing
+# Thanks @marcov!
+########
+PODMAN_OPTS_VOLUMES="-v /tmp/voltest/vol-0:/mnt/vol-0 -v /tmp/voltest/vol-1000:/mnt/vol-1000 -v /tmp/voltest/vol-100000:/mnt/vol-100000 -v /tmp/voltest/vol-101000:/mnt/vol-101000"
+PODMAN_OPTS="$PODMAN_OPTS_VOLUMES --rm"
+PODMAN_ID_MAPS="--uidmap=0:100000:1000000 --gidmap=0:100000:1000000"
+
+########
+# Make directories for UserNamespace testing
+########
+mkdir -p /tmp/voltest/vol-0
+mkdir -p /tmp/voltest/vol-1000
+mkdir -p /tmp/voltest/vol-100000
+mkdir -p /tmp/voltest/vol-101000
+UIDGID=`/usr/bin/tr -cd "[:digit:]" <<< /tmp/voltest/vol-0`
+
+chown $UIDGID:$UIDGID /tmp/voltest/vol-0
+chown $UIDGID:$UIDGID /tmp/voltest/vol-1000
+chown $UIDGID:$UIDGID /tmp/voltest/vol-100000
+chown $UIDGID:$UIDGID /tmp/voltest/vol-101000
+
+########
+# Make run test script
+########
+FILE=./runtest.sh
+/bin/cat <<EOM >$FILE
+#!/usr/bin/env bash
+ls -n /mnt
+for i in $(find /mnt -mindepth 1 -type d); do
+ touch "$i/foobar" 2>/dev/null;
+ echo "create $i/foobar: $?";
+ /bin/rm "$i/foobar" 2>/dev/null;
+done;
+exit 0
+EOM
+chmod +x $FILE
+
+########
+# Make Dockerfile
+########
+FILE=./Dockerfile
+/bin/cat <<EOM >$FILE
+FROM debian
+ADD ./runtest.sh /runtest.sh
+EOM
+chmod +x $FILE
+
+########
+# Build container
+########
+podman build -t usernamespace -f ./Dockerfile .
+
+########
+# Run the tests for UserNamespaces
+########
+echo "Run as root with no user NS"
+podman run $PODMAN_OPTS usernamespace /bin/bash runtest.sh
+echo ""
+
+echo "Run as user 1000 with no user NS"
+podman run --user=1000 $PODMAN_OPTS usernamespace /bin/bash /runtest.sh
+echo ""
+
+echo "Run as root with user NS "
+podman run $PODMAN_ID_MAPS $PODMAN_OPTS usernamespace /bin/bash /runtest.sh
+echo ""
+
+echo "Run as user 1000 with user NS "
+podman run --user=1000 $PODMAN_ID_MAPS $PODMAN_OPTS usernamespace /bin/bash /runtest.sh
+echo ""
+
+########
+# Clean up Podman
+########
+podman rm --all
+podman rmi --all
+rm -f ./runtest.sh
+rm -rf /tmp/voltest
+rm -f ./Dockerfile
+
+########
+# Build Dockerfiles for OnBuild Test
+# (Thanks @clcollins!)
+########
+FILE=./Dockerfile
+/bin/cat <<EOM >$FILE
+FROM alpine
+RUN touch /foo
+ONBUILD RUN touch /bar
+EOM
+chmod +x $FILE
+
+FILE=./Dockerfile-2
+/bin/cat <<EOM >$FILE
+FROM onbuild-image
+RUN touch /baz
+EOM
+chmod +x $FILE
+
+########
+# Build with Dockerfiles
+########
+podman build -f ./Dockerfile --format=docker -t onbuild-image .
+podman build -f ./Dockerfile-2 --format=docker -t result-image .
+
+########
+# Check for /bar /baz and /foo files
+########
+podman run --network=host result-image ls -alF /bar /baz /foo
+
+########
+# Clean up Podman
+########
+podman rm --all
+podman rmi --all
+rm ./Dockerfile*
+
+########
+# Build Dockerfile for WhaleSays test
+########
+FILE=./Dockerfile
+/bin/cat <<EOM >$FILE
+FROM docker/whalesay:latest
+RUN apt-get -y update && apt-get install -y fortunes
+CMD /usr/games/fortune -a | cowsay
+EOM
+chmod +x $FILE
+
+########
+# Build with the Dockerfile
+########
+podman build -f Dockerfile -t whale-says
+
+########
+# Run the container to see what the whale says
+########
+podman run whale-says
+
+########
+# Clean up Podman and /tmp
+########
+podman rm --all
+podman rmi --all
+rm ./Dockerfile*