123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619 |
- package main
- import (
- "bytes"
- "fmt"
- "io"
- "os"
- "os/exec"
- "path"
- "path/filepath"
- "strings"
- "testing"
- "gotest.tools/v3/assert"
- is "gotest.tools/v3/assert/cmp"
- "gotest.tools/v3/icmd"
- )
- const (
- cpTestPathParent = "/some"
- cpTestPath = "/some/path"
- cpTestName = "test"
- cpFullPath = "/some/path/test"
- cpContainerContents = "holla, i am the container"
- cpHostContents = "hello, i am the host"
- )
- type DockerCLICpSuite struct {
- ds *DockerSuite
- }
- func (s *DockerCLICpSuite) TearDownTest(c *testing.T) {
- s.ds.TearDownTest(c)
- }
- func (s *DockerCLICpSuite) OnTimeout(c *testing.T) {
- s.ds.OnTimeout(c)
- }
- // Ensure that an all-local path case returns an error.
- func (s *DockerCLICpSuite) TestCpLocalOnly(c *testing.T) {
- err := runDockerCp(c, "foo", "bar")
- assert.ErrorContains(c, err, "must specify at least one container source")
- }
- // Test for #5656
- // Check that garbage paths don't escape the container's rootfs
- func (s *DockerCLICpSuite) TestCpGarbagePath(c *testing.T) {
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- assert.NilError(c, os.MkdirAll(cpTestPath, os.ModeDir))
- hostFile, err := os.Create(cpFullPath)
- assert.NilError(c, err)
- defer hostFile.Close()
- defer os.RemoveAll(cpTestPathParent)
- fmt.Fprintf(hostFile, "%s", cpHostContents)
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- tmpname := filepath.Join(tmpdir, cpTestName)
- defer os.RemoveAll(tmpdir)
- path := path.Join("../../../../../../../../../../../../", cpFullPath)
- dockerCmd(c, "cp", containerID+":"+path, tmpdir)
- file, _ := os.Open(tmpname)
- defer file.Close()
- test, err := io.ReadAll(file)
- assert.NilError(c, err)
- assert.Assert(c, string(test) != cpHostContents, "output matched host file -- garbage path can escape container rootfs")
- assert.Assert(c, string(test) == cpContainerContents, "output doesn't match the input for garbage path")
- }
- // Check that relative paths are relative to the container's rootfs
- func (s *DockerCLICpSuite) TestCpRelativePath(c *testing.T) {
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- assert.NilError(c, os.MkdirAll(cpTestPath, os.ModeDir))
- hostFile, err := os.Create(cpFullPath)
- assert.NilError(c, err)
- defer hostFile.Close()
- defer os.RemoveAll(cpTestPathParent)
- fmt.Fprintf(hostFile, "%s", cpHostContents)
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- tmpname := filepath.Join(tmpdir, cpTestName)
- defer os.RemoveAll(tmpdir)
- var relPath string
- if path.IsAbs(cpFullPath) {
- // normally this is `filepath.Rel("/", cpFullPath)` but we cannot
- // get this unix-path manipulation on windows with filepath.
- relPath = cpFullPath[1:]
- }
- assert.Assert(c, path.IsAbs(cpFullPath), "path %s was assumed to be an absolute path", cpFullPath)
- dockerCmd(c, "cp", containerID+":"+relPath, tmpdir)
- file, _ := os.Open(tmpname)
- defer file.Close()
- test, err := io.ReadAll(file)
- assert.NilError(c, err)
- assert.Assert(c, string(test) != cpHostContents, "output matched host file -- relative path can escape container rootfs")
- assert.Assert(c, string(test) == cpContainerContents, "output doesn't match the input for relative path")
- }
- // Check that absolute paths are relative to the container's rootfs
- func (s *DockerCLICpSuite) TestCpAbsolutePath(c *testing.T) {
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath)
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- assert.NilError(c, os.MkdirAll(cpTestPath, os.ModeDir))
- hostFile, err := os.Create(cpFullPath)
- assert.NilError(c, err)
- defer hostFile.Close()
- defer os.RemoveAll(cpTestPathParent)
- fmt.Fprintf(hostFile, "%s", cpHostContents)
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- tmpname := filepath.Join(tmpdir, cpTestName)
- defer os.RemoveAll(tmpdir)
- path := cpFullPath
- dockerCmd(c, "cp", containerID+":"+path, tmpdir)
- file, _ := os.Open(tmpname)
- defer file.Close()
- test, err := io.ReadAll(file)
- assert.NilError(c, err)
- assert.Assert(c, string(test) != cpHostContents, "output matched host file -- absolute path can escape container rootfs")
- assert.Assert(c, string(test) == cpContainerContents, "output doesn't match the input for absolute path")
- }
- // Test for #5619
- // Check that absolute symlinks are still relative to the container's rootfs
- func (s *DockerCLICpSuite) TestCpAbsoluteSymlink(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpFullPath+" container_path")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- assert.NilError(c, os.MkdirAll(cpTestPath, os.ModeDir))
- hostFile, err := os.Create(cpFullPath)
- assert.NilError(c, err)
- defer hostFile.Close()
- defer os.RemoveAll(cpTestPathParent)
- fmt.Fprintf(hostFile, "%s", cpHostContents)
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- tmpname := filepath.Join(tmpdir, "container_path")
- defer os.RemoveAll(tmpdir)
- path := path.Join("/", "container_path")
- dockerCmd(c, "cp", containerID+":"+path, tmpdir)
- // We should have copied a symlink *NOT* the file itself!
- linkTarget, err := os.Readlink(tmpname)
- assert.NilError(c, err)
- assert.Equal(c, linkTarget, filepath.FromSlash(cpFullPath))
- }
- // Check that symlinks to a directory behave as expected when copying one from
- // a container.
- func (s *DockerCLICpSuite) TestCpFromSymlinkToDirectory(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpTestPathParent+" /dir_link")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- testDir, err := os.MkdirTemp("", "test-cp-from-symlink-to-dir-")
- assert.NilError(c, err)
- defer os.RemoveAll(testDir)
- // This copy command should copy the symlink, not the target, into the
- // temporary directory.
- dockerCmd(c, "cp", containerID+":"+"/dir_link", testDir)
- expectedPath := filepath.Join(testDir, "dir_link")
- linkTarget, err := os.Readlink(expectedPath)
- assert.NilError(c, err)
- assert.Equal(c, linkTarget, filepath.FromSlash(cpTestPathParent))
- os.Remove(expectedPath)
- // This copy command should resolve the symlink (note the trailing
- // separator), copying the target into the temporary directory.
- dockerCmd(c, "cp", containerID+":"+"/dir_link/", testDir)
- // It *should not* have copied the directory using the target's name, but
- // used the given name instead.
- unexpectedPath := filepath.Join(testDir, cpTestPathParent)
- stat, err := os.Lstat(unexpectedPath)
- if err == nil {
- out = fmt.Sprintf("target name was copied: %q - %q", stat.Mode(), stat.Name())
- }
- assert.ErrorContains(c, err, "", out)
- // It *should* have copied the directory using the asked name "dir_link".
- stat, err = os.Lstat(expectedPath)
- assert.NilError(c, err, "unable to stat resource at %q", expectedPath)
- assert.Assert(c, stat.IsDir(), "should have copied a directory but got %q instead", stat.Mode())
- }
- // Check that symlinks to a directory behave as expected when copying one to a
- // container.
- func (s *DockerCLICpSuite) TestCpToSymlinkToDirectory(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- testRequires(c, testEnv.IsLocalDaemon) // Requires local volume mount bind.
- testVol, err := os.MkdirTemp("", "test-cp-to-symlink-to-dir-")
- assert.NilError(c, err)
- defer os.RemoveAll(testVol)
- // Create a test container with a local volume. We will test by copying
- // to the volume path in the container which we can then verify locally.
- out, _ := dockerCmd(c, "create", "-v", testVol+":/testVol", "busybox")
- containerID := strings.TrimSpace(out)
- // Create a temp directory to hold a test file nested in a directory.
- testDir, err := os.MkdirTemp("", "test-cp-to-symlink-to-dir-")
- assert.NilError(c, err)
- defer os.RemoveAll(testDir)
- // This file will be at "/testDir/some/path/test" and will be copied into
- // the test volume later.
- hostTestFilename := filepath.Join(testDir, cpFullPath)
- assert.NilError(c, os.MkdirAll(filepath.Dir(hostTestFilename), os.FileMode(0700)))
- assert.NilError(c, os.WriteFile(hostTestFilename, []byte(cpHostContents), os.FileMode(0600)))
- // Now create another temp directory to hold a symlink to the
- // "/testDir/some" directory.
- linkDir, err := os.MkdirTemp("", "test-cp-to-symlink-to-dir-")
- assert.NilError(c, err)
- defer os.RemoveAll(linkDir)
- // Then symlink "/linkDir/dir_link" to "/testdir/some".
- linkTarget := filepath.Join(testDir, cpTestPathParent)
- localLink := filepath.Join(linkDir, "dir_link")
- assert.NilError(c, os.Symlink(linkTarget, localLink))
- // Now copy that symlink into the test volume in the container.
- dockerCmd(c, "cp", localLink, containerID+":/testVol")
- // This copy command should have copied the symlink *not* the target.
- expectedPath := filepath.Join(testVol, "dir_link")
- actualLinkTarget, err := os.Readlink(expectedPath)
- assert.NilError(c, err, "unable to read symlink at %q", expectedPath)
- assert.Equal(c, actualLinkTarget, linkTarget)
- // Good, now remove that copied link for the next test.
- os.Remove(expectedPath)
- // This copy command should resolve the symlink (note the trailing
- // separator), copying the target into the test volume directory in the
- // container.
- dockerCmd(c, "cp", localLink+"/", containerID+":/testVol")
- // It *should not* have copied the directory using the target's name, but
- // used the given name instead.
- unexpectedPath := filepath.Join(testVol, cpTestPathParent)
- stat, err := os.Lstat(unexpectedPath)
- if err == nil {
- out = fmt.Sprintf("target name was copied: %q - %q", stat.Mode(), stat.Name())
- }
- assert.ErrorContains(c, err, "", out)
- // It *should* have copied the directory using the asked name "dir_link".
- stat, err = os.Lstat(expectedPath)
- assert.NilError(c, err, "unable to stat resource at %q", expectedPath)
- assert.Assert(c, stat.IsDir(), "should have copied a directory but got %q instead", stat.Mode())
- // And this directory should contain the file copied from the host at the
- // expected location: "/testVol/dir_link/path/test"
- expectedFilepath := filepath.Join(testVol, "dir_link/path/test")
- fileContents, err := os.ReadFile(expectedFilepath)
- assert.NilError(c, err)
- assert.Equal(c, string(fileContents), cpHostContents)
- }
- // Test for #5619
- // Check that symlinks which are part of the resource path are still relative to the container's rootfs
- func (s *DockerCLICpSuite) TestCpSymlinkComponent(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpTestPath+" container_path")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- assert.NilError(c, os.MkdirAll(cpTestPath, os.ModeDir))
- hostFile, err := os.Create(cpFullPath)
- assert.NilError(c, err)
- defer hostFile.Close()
- defer os.RemoveAll(cpTestPathParent)
- fmt.Fprintf(hostFile, "%s", cpHostContents)
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- tmpname := filepath.Join(tmpdir, cpTestName)
- defer os.RemoveAll(tmpdir)
- path := path.Join("/", "container_path", cpTestName)
- dockerCmd(c, "cp", containerID+":"+path, tmpdir)
- file, _ := os.Open(tmpname)
- defer file.Close()
- test, err := io.ReadAll(file)
- assert.NilError(c, err)
- assert.Assert(c, string(test) != cpHostContents, "output matched host file -- symlink path component can escape container rootfs")
- assert.Equal(c, string(test), cpContainerContents, "output doesn't match the input for symlink path component")
- }
- // Check that cp with unprivileged user doesn't return any error
- func (s *DockerCLICpSuite) TestCpUnprivilegedUser(c *testing.T) {
- testRequires(c, DaemonIsLinux, testEnv.IsLocalDaemon)
- testRequires(c, UnixCli) // uses chmod/su: not available on windows
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "touch "+cpTestName)
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- defer os.RemoveAll(tmpdir)
- err = os.Chmod(tmpdir, 0777)
- assert.NilError(c, err)
- result := icmd.RunCommand("su", "unprivilegeduser", "-c",
- fmt.Sprintf("%s cp %s:%s %s", dockerBinary, containerID, cpTestName, tmpdir))
- result.Assert(c, icmd.Expected{})
- }
- func (s *DockerCLICpSuite) TestCpSpecialFiles(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- testRequires(c, testEnv.IsLocalDaemon)
- outDir, err := os.MkdirTemp("", "cp-test-special-files")
- assert.NilError(c, err)
- defer os.RemoveAll(outDir)
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "touch /foo")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- // Copy actual /etc/resolv.conf
- dockerCmd(c, "cp", containerID+":/etc/resolv.conf", outDir)
- expected := readContainerFile(c, containerID, "resolv.conf")
- actual, err := os.ReadFile(outDir + "/resolv.conf")
- assert.NilError(c, err)
- assert.Assert(c, bytes.Equal(actual, expected), "Expected copied file to be duplicate of the container resolvconf")
- // Copy actual /etc/hosts
- dockerCmd(c, "cp", containerID+":/etc/hosts", outDir)
- expected = readContainerFile(c, containerID, "hosts")
- actual, err = os.ReadFile(outDir + "/hosts")
- assert.NilError(c, err)
- assert.Assert(c, bytes.Equal(actual, expected), "Expected copied file to be duplicate of the container hosts")
- // Copy actual /etc/resolv.conf
- dockerCmd(c, "cp", containerID+":/etc/hostname", outDir)
- expected = readContainerFile(c, containerID, "hostname")
- actual, err = os.ReadFile(outDir + "/hostname")
- assert.NilError(c, err)
- assert.Assert(c, bytes.Equal(actual, expected), "Expected copied file to be duplicate of the container hostname")
- }
- func (s *DockerCLICpSuite) TestCpVolumePath(c *testing.T) {
- // stat /tmp/cp-test-volumepath851508420/test gets permission denied for the user
- testRequires(c, NotUserNamespace)
- testRequires(c, DaemonIsLinux)
- testRequires(c, testEnv.IsLocalDaemon)
- tmpDir, err := os.MkdirTemp("", "cp-test-volumepath")
- assert.NilError(c, err)
- defer os.RemoveAll(tmpDir)
- outDir, err := os.MkdirTemp("", "cp-test-volumepath-out")
- assert.NilError(c, err)
- defer os.RemoveAll(outDir)
- _, err = os.Create(tmpDir + "/test")
- assert.NilError(c, err)
- out, _ := dockerCmd(c, "run", "-d", "-v", "/foo", "-v", tmpDir+"/test:/test", "-v", tmpDir+":/baz", "busybox", "/bin/sh", "-c", "touch /foo/bar")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- // Copy actual volume path
- dockerCmd(c, "cp", containerID+":/foo", outDir)
- stat, err := os.Stat(outDir + "/foo")
- assert.NilError(c, err)
- assert.Assert(c, stat.IsDir(), "Expected copied content to be dir")
- stat, err = os.Stat(outDir + "/foo/bar")
- assert.NilError(c, err)
- assert.Assert(c, !stat.IsDir(), "Expected file `bar` to be a file")
- // Copy file nested in volume
- dockerCmd(c, "cp", containerID+":/foo/bar", outDir)
- stat, err = os.Stat(outDir + "/bar")
- assert.NilError(c, err)
- assert.Assert(c, !stat.IsDir(), "Expected file `bar` to be a file")
- // Copy Bind-mounted dir
- dockerCmd(c, "cp", containerID+":/baz", outDir)
- stat, err = os.Stat(outDir + "/baz")
- assert.NilError(c, err)
- assert.Assert(c, stat.IsDir(), "Expected `baz` to be a dir")
- // Copy file nested in bind-mounted dir
- dockerCmd(c, "cp", containerID+":/baz/test", outDir)
- fb, err := os.ReadFile(outDir + "/baz/test")
- assert.NilError(c, err)
- fb2, err := os.ReadFile(tmpDir + "/test")
- assert.NilError(c, err)
- assert.Assert(c, bytes.Equal(fb, fb2), "Expected copied file to be duplicate of bind-mounted file")
- // Copy bind-mounted file
- dockerCmd(c, "cp", containerID+":/test", outDir)
- fb, err = os.ReadFile(outDir + "/test")
- assert.NilError(c, err)
- fb2, err = os.ReadFile(tmpDir + "/test")
- assert.NilError(c, err)
- assert.Assert(c, bytes.Equal(fb, fb2), "Expected copied file to be duplicate of bind-mounted file")
- }
- func (s *DockerCLICpSuite) TestCpToDot(c *testing.T) {
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "echo lololol > /test")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- defer os.RemoveAll(tmpdir)
- cwd, err := os.Getwd()
- assert.NilError(c, err)
- defer os.Chdir(cwd)
- err = os.Chdir(tmpdir)
- assert.NilError(c, err)
- dockerCmd(c, "cp", containerID+":/test", ".")
- content, err := os.ReadFile("./test")
- assert.NilError(c, err)
- assert.Equal(c, string(content), "lololol\n")
- }
- func (s *DockerCLICpSuite) TestCpToStdout(c *testing.T) {
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "echo lololol > /test")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- out, err := RunCommandPipelineWithOutput(
- exec.Command(dockerBinary, "cp", containerID+":/test", "-"),
- exec.Command("tar", "-vtf", "-"))
- assert.NilError(c, err)
- assert.Check(c, is.Contains(out, "test"))
- assert.Check(c, is.Contains(out, "-rw"))
- }
- func (s *DockerCLICpSuite) TestCpNameHasColon(c *testing.T) {
- testRequires(c, testEnv.IsLocalDaemon, DaemonIsLinux)
- out, _ := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "echo lololol > /te:s:t")
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- tmpdir, err := os.MkdirTemp("", "docker-integration")
- assert.NilError(c, err)
- defer os.RemoveAll(tmpdir)
- dockerCmd(c, "cp", containerID+":/te:s:t", tmpdir)
- content, err := os.ReadFile(tmpdir + "/te:s:t")
- assert.NilError(c, err)
- assert.Equal(c, string(content), "lololol\n")
- }
- func (s *DockerCLICpSuite) TestCopyAndRestart(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- expectedMsg := "hello"
- out, _ := dockerCmd(c, "run", "-d", "busybox", "echo", expectedMsg)
- containerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", containerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- tmpDir, err := os.MkdirTemp("", "test-docker-restart-after-copy-")
- assert.NilError(c, err)
- defer os.RemoveAll(tmpDir)
- dockerCmd(c, "cp", fmt.Sprintf("%s:/etc/group", containerID), tmpDir)
- out, _ = dockerCmd(c, "start", "-a", containerID)
- assert.Equal(c, strings.TrimSpace(out), expectedMsg)
- }
- func (s *DockerCLICpSuite) TestCopyCreatedContainer(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- dockerCmd(c, "create", "--name", "test_cp", "-v", "/test", "busybox")
- tmpDir, err := os.MkdirTemp("", "test")
- assert.NilError(c, err)
- defer os.RemoveAll(tmpDir)
- dockerCmd(c, "cp", "test_cp:/bin/sh", tmpDir)
- }
- // test copy with option `-L`: following symbol link
- // Check that symlinks to a file behave as expected when copying one from
- // a container to host following symbol link
- func (s *DockerCLICpSuite) TestCpSymlinkFromConToHostFollowSymlink(c *testing.T) {
- testRequires(c, DaemonIsLinux)
- out, exitCode := dockerCmd(c, "run", "-d", "busybox", "/bin/sh", "-c", "mkdir -p '"+cpTestPath+"' && echo -n '"+cpContainerContents+"' > "+cpFullPath+" && ln -s "+cpFullPath+" /dir_link")
- assert.Equal(c, exitCode, 0, "failed to set up container: %s", out)
- cleanedContainerID := strings.TrimSpace(out)
- out, _ = dockerCmd(c, "wait", cleanedContainerID)
- assert.Equal(c, strings.TrimSpace(out), "0", "failed to set up container")
- testDir, err := os.MkdirTemp("", "test-cp-symlink-container-to-host-follow-symlink")
- assert.NilError(c, err)
- defer os.RemoveAll(testDir)
- // This copy command should copy the symlink, not the target, into the
- // temporary directory.
- dockerCmd(c, "cp", "-L", cleanedContainerID+":"+"/dir_link", testDir)
- expectedPath := filepath.Join(testDir, "dir_link")
- expected := []byte(cpContainerContents)
- actual, err := os.ReadFile(expectedPath)
- assert.NilError(c, err)
- os.Remove(expectedPath)
- assert.Assert(c, bytes.Equal(actual, expected), "Expected copied file to be duplicate of the container symbol link target")
- // now test copy symbol link to a non-existing file in host
- expectedPath = filepath.Join(testDir, "somefile_host")
- // expectedPath shouldn't exist, if exists, remove it
- if _, err := os.Lstat(expectedPath); err == nil {
- os.Remove(expectedPath)
- }
- dockerCmd(c, "cp", "-L", cleanedContainerID+":"+"/dir_link", expectedPath)
- actual, err = os.ReadFile(expectedPath)
- assert.NilError(c, err)
- defer os.Remove(expectedPath)
- assert.Assert(c, bytes.Equal(actual, expected), "Expected copied file to be duplicate of the container symbol link target")
- }
|