summaryrefslogtreecommitdiff
path: root/test
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2020-06-26 09:36:57 -0400
committerGitHub <noreply@github.com>2020-06-26 09:36:57 -0400
commit673116c063f173ae7ff799a920f9c1ca28194b9d (patch)
treeeb619c82d099835de76a7be65a91ca98f519b78b /test
parentd721f1fee68db8f9e12c83855654da0d7d985140 (diff)
parenta8cac24bea8c4fe1ae1c49d8f3841974c2448413 (diff)
downloadpodman-673116c063f173ae7ff799a920f9c1ca28194b9d.tar.gz
podman-673116c063f173ae7ff799a920f9c1ca28194b9d.tar.bz2
podman-673116c063f173ae7ff799a920f9c1ca28194b9d.zip
Merge pull request #6767 from vrothberg/sec-opt-test
e2e inspect: HostConfig.SecurityOpt
Diffstat (limited to 'test')
-rw-r--r--test/e2e/inspect_test.go26
1 files changed, 26 insertions, 0 deletions
diff --git a/test/e2e/inspect_test.go b/test/e2e/inspect_test.go
index 2fad38a36..ed7876d8a 100644
--- a/test/e2e/inspect_test.go
+++ b/test/e2e/inspect_test.go
@@ -7,6 +7,7 @@ import (
. "github.com/containers/libpod/test/utils"
. "github.com/onsi/ginkgo"
. "github.com/onsi/gomega"
+ "github.com/opencontainers/selinux/go-selinux"
)
var _ = Describe("Podman inspect", func() {
@@ -263,4 +264,29 @@ var _ = Describe("Podman inspect", func() {
Expect(len(baseJSON)).To(Equal(1))
Expect(baseJSON[0].Name).To(Equal(ctrName))
})
+
+ It("podman inspect - HostConfig.SecurityOpt ", func() {
+ if !selinux.GetEnabled() {
+ Skip("SELinux not enabled")
+ }
+
+ ctrName := "hugo"
+ create := podmanTest.PodmanNoCache([]string{
+ "create", "--name", ctrName,
+ "--security-opt", "seccomp=unconfined",
+ "--security-opt", "label=type:spc_t",
+ "--security-opt", "label=level:s0",
+ ALPINE, "sh"})
+
+ create.WaitWithDefaultTimeout()
+ Expect(create.ExitCode()).To(Equal(0))
+
+ baseInspect := podmanTest.Podman([]string{"inspect", ctrName})
+ baseInspect.WaitWithDefaultTimeout()
+ Expect(baseInspect.ExitCode()).To(Equal(0))
+ baseJSON := baseInspect.InspectContainerToJSON()
+ Expect(len(baseJSON)).To(Equal(1))
+ Expect(baseJSON[0].HostConfig.SecurityOpt).To(Equal([]string{"label=type:spc_t,label=level:s0", "seccomp=unconfined"}))
+ })
+
})