aboutsummaryrefslogtreecommitdiff
path: root/test/system/190-run-ipcns.bats
blob: db1d716d74258e89d77279803c8bdd8f4434655f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
#!/usr/bin/env bats   -*- bats -*-
# shellcheck disable=SC2096
#
# Tests for podman build
#

load helpers

@test "podman --ipc=host" {
    hostipc="$(readlink /proc/self/ns/ipc)"
    run_podman run --rm --ipc=host $IMAGE readlink /proc/self/ns/ipc
    is "$output" "$hostipc" "HostIPC and container IPC should be same"
}

@test "podman --ipc=none" {
    hostipc="$(readlink /proc/self/ns/ipc)"
    run_podman run --rm --ipc=none $IMAGE readlink /proc/self/ns/ipc
    assert "$output" != "$hostipc" "containeripc should != hostipc"

    run_podman 1 run --rm --ipc=none $IMAGE ls /dev/shm
    is "$output" "ls: /dev/shm: No such file or directory" "Should fail with missing /dev/shm"
}

@test "podman --ipc=private" {
    hostipc="$(readlink /proc/self/ns/ipc)"
    run_podman run -d --ipc=private --name test $IMAGE sleep 100
    assert "$output" != "$hostipc" "containeripc should != hostipc"

    run_podman 125 run --ipc=container:test --rm $IMAGE readlink /proc/self/ns/ipc
    is "$output" ".*is not allowed: non-shareable IPC (hint: use IpcMode:shareable for the donor container)" "Containers should not share private ipc namespace"
    run_podman stop -t 0 test
    run_podman rm test
}

@test "podman --ipc=shareable" {
    hostipc="$(readlink /proc/self/ns/ipc)"
    run_podman run -d --ipc=shareable --name test $IMAGE sleep 100
    assert "$output" != "$hostipc" "containeripc(shareable) should != hostipc"

    run_podman run --ipc=container:test --rm $IMAGE readlink /proc/self/ns/ipc
    assert "$output" != "$hostipc" "containeripc(:test) should != hostipc"

    run_podman stop -t 0 test
    run_podman rm test
}

@test "podman --ipc=container@test" {
    hostipc="$(readlink /proc/self/ns/ipc)"
    run_podman run -d --name test $IMAGE sleep 100
    run_podman exec test readlink /proc/self/ns/ipc
    assert "$output" != "$hostipc" "containeripc(exec) should != hostipc"

    testipc=$output
    run_podman run --ipc=container:test --rm $IMAGE readlink /proc/self/ns/ipc
    assert "$output" = "$testipc" "Containers should share ipc namespace"
    run_podman stop -t 0 test
    run_podman rm test
}

# vim: filetype=sh