134 lines
4.2 KiB
Go
134 lines
4.2 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
"os/exec"
|
|
"path/filepath"
|
|
"runtime"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/docker/docker/integration-cli/cli"
|
|
"github.com/docker/docker/testutil/fixtures/load"
|
|
"gotest.tools/v3/assert"
|
|
)
|
|
|
|
func ensureSyscallTest(ctx context.Context, c *testing.T) {
|
|
defer testEnv.ProtectImage(c, "syscall-test:latest")
|
|
|
|
// If the image already exists, there's nothing left to do.
|
|
if testEnv.HasExistingImage(c, "syscall-test:latest") {
|
|
return
|
|
}
|
|
|
|
// if no match, must build in docker, which is significantly slower
|
|
// (slower mostly because of the vfs graphdriver)
|
|
if testEnv.DaemonInfo.OSType != runtime.GOOS {
|
|
ensureSyscallTestBuild(ctx, c)
|
|
return
|
|
}
|
|
|
|
tmp, err := os.MkdirTemp("", "syscall-test-build")
|
|
assert.NilError(c, err, "couldn't create temp dir")
|
|
defer os.RemoveAll(tmp)
|
|
|
|
gcc, err := exec.LookPath("gcc")
|
|
assert.NilError(c, err, "could not find gcc")
|
|
|
|
tests := []string{"userns", "ns", "acct", "setuid", "setgid", "socket", "raw"}
|
|
for _, test := range tests {
|
|
out, err := exec.Command(gcc, "-g", "-Wall", "-static", fmt.Sprintf("../contrib/syscall-test/%s.c", test), "-o", fmt.Sprintf("%s/%s-test", tmp, test)).CombinedOutput()
|
|
assert.NilError(c, err, string(out))
|
|
}
|
|
|
|
if runtime.GOOS == "linux" && runtime.GOARCH == "amd64" {
|
|
out, err := exec.Command(gcc, "-s", "-m32", "-nostdlib", "-static", "../contrib/syscall-test/exit32.s", "-o", tmp+"/"+"exit32-test").CombinedOutput()
|
|
assert.NilError(c, err, string(out))
|
|
}
|
|
|
|
dockerFile := filepath.Join(tmp, "Dockerfile")
|
|
content := []byte(`
|
|
FROM debian:bookworm-slim
|
|
COPY . /usr/bin/
|
|
`)
|
|
err = os.WriteFile(dockerFile, content, 0o600)
|
|
assert.NilError(c, err)
|
|
|
|
var buildArgs []string
|
|
if arg := os.Getenv("DOCKER_BUILD_ARGS"); strings.TrimSpace(arg) != "" {
|
|
buildArgs = strings.Split(arg, " ")
|
|
}
|
|
buildArgs = append(buildArgs, []string{"-q", "-t", "syscall-test", tmp}...)
|
|
buildArgs = append([]string{"build"}, buildArgs...)
|
|
cli.DockerCmd(c, buildArgs...)
|
|
}
|
|
|
|
func ensureSyscallTestBuild(ctx context.Context, c *testing.T) {
|
|
err := load.FrozenImagesLinux(ctx, testEnv.APIClient(), "debian:bookworm-slim")
|
|
assert.NilError(c, err)
|
|
|
|
var buildArgs []string
|
|
if arg := os.Getenv("DOCKER_BUILD_ARGS"); strings.TrimSpace(arg) != "" {
|
|
buildArgs = strings.Split(arg, " ")
|
|
}
|
|
buildArgs = append(buildArgs, []string{"-q", "-t", "syscall-test", "../contrib/syscall-test"}...)
|
|
buildArgs = append([]string{"build"}, buildArgs...)
|
|
cli.DockerCmd(c, buildArgs...)
|
|
}
|
|
|
|
func ensureNNPTest(ctx context.Context, c *testing.T) {
|
|
defer testEnv.ProtectImage(c, "nnp-test:latest")
|
|
|
|
// If the image already exists, there's nothing left to do.
|
|
if testEnv.HasExistingImage(c, "nnp-test:latest") {
|
|
return
|
|
}
|
|
|
|
// if no match, must build in docker, which is significantly slower
|
|
// (slower mostly because of the vfs graphdriver)
|
|
if testEnv.DaemonInfo.OSType != runtime.GOOS {
|
|
ensureNNPTestBuild(ctx, c)
|
|
return
|
|
}
|
|
|
|
tmp, err := os.MkdirTemp("", "docker-nnp-test")
|
|
assert.NilError(c, err)
|
|
|
|
gcc, err := exec.LookPath("gcc")
|
|
assert.NilError(c, err, "could not find gcc")
|
|
|
|
out, err := exec.Command(gcc, "-g", "-Wall", "-static", "../contrib/nnp-test/nnp-test.c", "-o", filepath.Join(tmp, "nnp-test")).CombinedOutput()
|
|
assert.NilError(c, err, string(out))
|
|
|
|
dockerfile := filepath.Join(tmp, "Dockerfile")
|
|
content := `
|
|
FROM debian:bookworm-slim
|
|
COPY . /usr/bin
|
|
RUN chmod +s /usr/bin/nnp-test
|
|
`
|
|
err = os.WriteFile(dockerfile, []byte(content), 0o600)
|
|
assert.NilError(c, err, "could not write Dockerfile for nnp-test image")
|
|
|
|
var buildArgs []string
|
|
if arg := os.Getenv("DOCKER_BUILD_ARGS"); strings.TrimSpace(arg) != "" {
|
|
buildArgs = strings.Split(arg, " ")
|
|
}
|
|
buildArgs = append(buildArgs, []string{"-q", "-t", "nnp-test", tmp}...)
|
|
buildArgs = append([]string{"build"}, buildArgs...)
|
|
cli.DockerCmd(c, buildArgs...)
|
|
}
|
|
|
|
func ensureNNPTestBuild(ctx context.Context, c *testing.T) {
|
|
err := load.FrozenImagesLinux(ctx, testEnv.APIClient(), "debian:bookworm-slim")
|
|
assert.NilError(c, err)
|
|
|
|
var buildArgs []string
|
|
if arg := os.Getenv("DOCKER_BUILD_ARGS"); strings.TrimSpace(arg) != "" {
|
|
buildArgs = strings.Split(arg, " ")
|
|
}
|
|
buildArgs = append(buildArgs, []string{"-q", "-t", "npp-test", "../contrib/nnp-test"}...)
|
|
buildArgs = append([]string{"build"}, buildArgs...)
|
|
cli.DockerCmd(c, buildArgs...)
|
|
}
|