diff options
| author | Matthew Heon <mheon@redhat.com> | 2021-02-23 13:55:47 -0500 |
|---|---|---|
| committer | Matthew Heon <mheon@redhat.com> | 2021-02-23 14:05:18 -0500 |
| commit | fc32ec768df8a59a9c438f38cf2fd2c08a77f94b (patch) | |
| tree | 9f1b73bc58cffba709e5ea9de57120bd904e04ce /test | |
| parent | 4dfcd585243b1695d36ac2a1a90dcb9818773511 (diff) | |
| download | podman-fc32ec768df8a59a9c438f38cf2fd2c08a77f94b.tar.gz podman-fc32ec768df8a59a9c438f38cf2fd2c08a77f94b.tar.bz2 podman-fc32ec768df8a59a9c438f38cf2fd2c08a77f94b.zip | |
Sort CapDrop in inspect to guarantee order
The order of CapAdd when inspecting containers is deterministic.
However, the order of CapDrop is not (for unclear reasons). Add a
quick sort on the final array to guarantee a consistent order.
Fixes #9490
Signed-off-by: Matthew Heon <mheon@redhat.com>
Diffstat (limited to 'test')
| -rw-r--r-- | test/e2e/inspect_test.go | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/test/e2e/inspect_test.go b/test/e2e/inspect_test.go index d417fc49d..772ebed05 100644 --- a/test/e2e/inspect_test.go +++ b/test/e2e/inspect_test.go @@ -490,4 +490,22 @@ var _ = Describe("Podman inspect", func() { } Expect(found).To(BeTrue()) }) + + It("Dropped capabilities are sorted", func() { + ctrName := "testCtr" + session := podmanTest.Podman([]string{"run", "-d", "--cap-drop", "CAP_AUDIT_WRITE", "--cap-drop", "CAP_MKNOD", "--cap-drop", "CAP_NET_RAW", "--name", ctrName, ALPINE, "top"}) + session.WaitWithDefaultTimeout() + Expect(session.ExitCode()).To(BeZero()) + + inspect := podmanTest.Podman([]string{"inspect", ctrName}) + inspect.WaitWithDefaultTimeout() + Expect(inspect.ExitCode()).To(BeZero()) + + data := inspect.InspectContainerToJSON() + Expect(len(data)).To(Equal(1)) + Expect(len(data[0].HostConfig.CapDrop)).To(Equal(3)) + Expect(data[0].HostConfig.CapDrop[0]).To(Equal("CAP_AUDIT_WRITE")) + Expect(data[0].HostConfig.CapDrop[1]).To(Equal("CAP_MKNOD")) + Expect(data[0].HostConfig.CapDrop[2]).To(Equal("CAP_NET_RAW")) + }) }) |