|
@@ -23,7 +23,7 @@ const (
|
|
// Test for #5656
|
|
// Test for #5656
|
|
// Check that garbage paths don't escape the container's rootfs
|
|
// Check that garbage paths don't escape the container's rootfs
|
|
func TestCpGarbagePath(t *testing.T) {
|
|
func TestCpGarbagePath(t *testing.T) {
|
|
- out, exitCode, err := cmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -31,7 +31,7 @@ func TestCpGarbagePath(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
@@ -59,7 +59,7 @@ func TestCpGarbagePath(t *testing.T) {
|
|
|
|
|
|
path := filepath.Join("../../../../../../../../../../../../", cpFullPath)
|
|
path := filepath.Join("../../../../../../../../../../../../", cpFullPath)
|
|
|
|
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from garbage path: %s:%s %s", cleanedContainerID, path, err)
|
|
t.Fatalf("couldn't copy from garbage path: %s:%s %s", cleanedContainerID, path, err)
|
|
}
|
|
}
|
|
@@ -85,7 +85,7 @@ func TestCpGarbagePath(t *testing.T) {
|
|
|
|
|
|
// Check that relative paths are relative to the container's rootfs
|
|
// Check that relative paths are relative to the container's rootfs
|
|
func TestCpRelativePath(t *testing.T) {
|
|
func TestCpRelativePath(t *testing.T) {
|
|
- out, exitCode, err := cmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -93,7 +93,7 @@ func TestCpRelativePath(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
@@ -122,7 +122,7 @@ func TestCpRelativePath(t *testing.T) {
|
|
|
|
|
|
path, _ := filepath.Rel("/", cpFullPath)
|
|
path, _ := filepath.Rel("/", cpFullPath)
|
|
|
|
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from relative path: %s:%s %s", cleanedContainerID, path, err)
|
|
t.Fatalf("couldn't copy from relative path: %s:%s %s", cleanedContainerID, path, err)
|
|
}
|
|
}
|
|
@@ -148,7 +148,7 @@ func TestCpRelativePath(t *testing.T) {
|
|
|
|
|
|
// Check that absolute paths are relative to the container's rootfs
|
|
// Check that absolute paths are relative to the container's rootfs
|
|
func TestCpAbsolutePath(t *testing.T) {
|
|
func TestCpAbsolutePath(t *testing.T) {
|
|
- out, exitCode, err := cmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -156,7 +156,7 @@ func TestCpAbsolutePath(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
@@ -185,7 +185,7 @@ func TestCpAbsolutePath(t *testing.T) {
|
|
|
|
|
|
path := cpFullPath
|
|
path := cpFullPath
|
|
|
|
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from absolute path: %s:%s %s", cleanedContainerID, path, err)
|
|
t.Fatalf("couldn't copy from absolute path: %s:%s %s", cleanedContainerID, path, err)
|
|
}
|
|
}
|
|
@@ -212,7 +212,7 @@ func TestCpAbsolutePath(t *testing.T) {
|
|
// Test for #5619
|
|
// Test for #5619
|
|
// Check that absolute symlinks are still relative to the container's rootfs
|
|
// Check that absolute symlinks are still relative to the container's rootfs
|
|
func TestCpAbsoluteSymlink(t *testing.T) {
|
|
func TestCpAbsoluteSymlink(t *testing.T) {
|
|
- out, exitCode, err := cmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpFullPath+" container_path")
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpFullPath+" container_path")
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -220,7 +220,7 @@ func TestCpAbsoluteSymlink(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
@@ -249,7 +249,7 @@ func TestCpAbsoluteSymlink(t *testing.T) {
|
|
|
|
|
|
path := filepath.Join("/", "container_path")
|
|
path := filepath.Join("/", "container_path")
|
|
|
|
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from absolute path: %s:%s %s", cleanedContainerID, path, err)
|
|
t.Fatalf("couldn't copy from absolute path: %s:%s %s", cleanedContainerID, path, err)
|
|
}
|
|
}
|
|
@@ -276,7 +276,7 @@ func TestCpAbsoluteSymlink(t *testing.T) {
|
|
// Test for #5619
|
|
// Test for #5619
|
|
// Check that symlinks which are part of the resource path are still relative to the container's rootfs
|
|
// Check that symlinks which are part of the resource path are still relative to the container's rootfs
|
|
func TestCpSymlinkComponent(t *testing.T) {
|
|
func TestCpSymlinkComponent(t *testing.T) {
|
|
- out, exitCode, err := cmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpTestPath+" container_path")
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpTestPath+" container_path")
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -284,7 +284,7 @@ func TestCpSymlinkComponent(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
@@ -313,7 +313,7 @@ func TestCpSymlinkComponent(t *testing.T) {
|
|
|
|
|
|
path := filepath.Join("/", "container_path", cpTestName)
|
|
path := filepath.Join("/", "container_path", cpTestName)
|
|
|
|
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":"+path, tmpdir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from symlink path component: %s:%s %s", cleanedContainerID, path, err)
|
|
t.Fatalf("couldn't copy from symlink path component: %s:%s %s", cleanedContainerID, path, err)
|
|
}
|
|
}
|
|
@@ -339,7 +339,7 @@ func TestCpSymlinkComponent(t *testing.T) {
|
|
|
|
|
|
// Check that cp with unprivileged user doesn't return any error
|
|
// Check that cp with unprivileged user doesn't return any error
|
|
func TestCpUnprivilegedUser(t *testing.T) {
|
|
func TestCpUnprivilegedUser(t *testing.T) {
|
|
- out, exitCode, err := cmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "touch "+cpTestName)
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "busybox", "/bin/sh", "-c", "touch "+cpTestName)
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -347,7 +347,7 @@ func TestCpUnprivilegedUser(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
@@ -389,7 +389,7 @@ func TestCpVolumePath(t *testing.T) {
|
|
t.Fatal(err)
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
|
|
- out, exitCode, err := cmd(t, "run", "-d", "-v", "/foo", "-v", tmpDir+"/test:/test", "-v", tmpDir+":/baz", "busybox", "/bin/sh", "-c", "touch /foo/bar")
|
|
|
|
|
|
+ out, exitCode, err := dockerCmd(t, "run", "-d", "-v", "/foo", "-v", tmpDir+"/test:/test", "-v", tmpDir+":/baz", "busybox", "/bin/sh", "-c", "touch /foo/bar")
|
|
if err != nil || exitCode != 0 {
|
|
if err != nil || exitCode != 0 {
|
|
t.Fatal("failed to create a container", out, err)
|
|
t.Fatal("failed to create a container", out, err)
|
|
}
|
|
}
|
|
@@ -397,13 +397,13 @@ func TestCpVolumePath(t *testing.T) {
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
cleanedContainerID := stripTrailingCharacters(out)
|
|
defer deleteContainer(cleanedContainerID)
|
|
defer deleteContainer(cleanedContainerID)
|
|
|
|
|
|
- out, _, err = cmd(t, "wait", cleanedContainerID)
|
|
|
|
|
|
+ out, _, err = dockerCmd(t, "wait", cleanedContainerID)
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
if err != nil || stripTrailingCharacters(out) != "0" {
|
|
t.Fatal("failed to set up container", out, err)
|
|
t.Fatal("failed to set up container", out, err)
|
|
}
|
|
}
|
|
|
|
|
|
// Copy actual volume path
|
|
// Copy actual volume path
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":/foo", outDir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":/foo", outDir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from volume path: %s:%s %v", cleanedContainerID, "/foo", err)
|
|
t.Fatalf("couldn't copy from volume path: %s:%s %v", cleanedContainerID, "/foo", err)
|
|
}
|
|
}
|
|
@@ -423,7 +423,7 @@ func TestCpVolumePath(t *testing.T) {
|
|
}
|
|
}
|
|
|
|
|
|
// Copy file nested in volume
|
|
// Copy file nested in volume
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":/foo/bar", outDir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":/foo/bar", outDir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from volume path: %s:%s %v", cleanedContainerID, "/foo", err)
|
|
t.Fatalf("couldn't copy from volume path: %s:%s %v", cleanedContainerID, "/foo", err)
|
|
}
|
|
}
|
|
@@ -436,7 +436,7 @@ func TestCpVolumePath(t *testing.T) {
|
|
}
|
|
}
|
|
|
|
|
|
// Copy Bind-mounted dir
|
|
// Copy Bind-mounted dir
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":/baz", outDir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":/baz", outDir)
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatalf("couldn't copy from bind-mounted volume path: %s:%s %v", cleanedContainerID, "/baz", err)
|
|
t.Fatalf("couldn't copy from bind-mounted volume path: %s:%s %v", cleanedContainerID, "/baz", err)
|
|
}
|
|
}
|
|
@@ -449,7 +449,7 @@ func TestCpVolumePath(t *testing.T) {
|
|
}
|
|
}
|
|
|
|
|
|
// Copy file nested in bind-mounted dir
|
|
// Copy file nested in bind-mounted dir
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":/baz/test", outDir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":/baz/test", outDir)
|
|
fb, err := ioutil.ReadFile(outDir + "/baz/test")
|
|
fb, err := ioutil.ReadFile(outDir + "/baz/test")
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
t.Fatal(err)
|
|
@@ -463,7 +463,7 @@ func TestCpVolumePath(t *testing.T) {
|
|
}
|
|
}
|
|
|
|
|
|
// Copy bind-mounted file
|
|
// Copy bind-mounted file
|
|
- _, _, err = cmd(t, "cp", cleanedContainerID+":/test", outDir)
|
|
|
|
|
|
+ _, _, err = dockerCmd(t, "cp", cleanedContainerID+":/test", outDir)
|
|
fb, err = ioutil.ReadFile(outDir + "/test")
|
|
fb, err = ioutil.ReadFile(outDir + "/test")
|
|
if err != nil {
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
t.Fatal(err)
|