From d68a6b52ecd5354dccfb2f62dd7b06518200fa28 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Wed, 2 Sep 2020 07:49:11 -0400 Subject: We should not be mounting /run as noexec when run with --systemd The system defaults /run to "exec" mode, and we default --read-only mounts on /run to "exec", so --systemd should follow suit. Signed-off-by: Daniel J Walsh --- test/e2e/systemd_test.go | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'test/e2e/systemd_test.go') diff --git a/test/e2e/systemd_test.go b/test/e2e/systemd_test.go index b5114e429..9a3247b77 100644 --- a/test/e2e/systemd_test.go +++ b/test/e2e/systemd_test.go @@ -146,4 +146,12 @@ WantedBy=multi-user.target Expect(len(conData)).To(Equal(1)) Expect(conData[0].Config.SystemdMode).To(BeTrue()) }) + + It("podman run --systemd container should NOT mount /run noexec", func() { + session := podmanTest.Podman([]string{"run", "--systemd", "always", ALPINE, "sh", "-c", "mount | grep \"/run \""}) + session.WaitWithDefaultTimeout() + Expect(session.ExitCode()).To(Equal(0)) + + Expect(session.OutputToString()).To(Not(ContainSubstring("noexec"))) + }) }) -- cgit v1.2.3-54-g00ecf