vbatts/cri-o
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
2266 commits 7 branches 27 tags 53 MiB
Commit graph

296 commits

Author SHA1 Message Date
Samuel Ortiz
5d8537f270
testdata: sandbox ns options should be under security_context 
And not directly under linux.

Fixes #243

Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
 2016-12-08 18:09:28 +01:00
Xianglin Gao
cb5ed1ce9d reload default apparmor profile if it is unloaded 
Signed-off-by: Xianglin Gao <xlgao@zju.edu.cn>
 2016-12-07 20:19:29 +08:00
Mrunal Patel
a4021ba179 Merge pull request #235 from runcom/fix-state 
server: sync ctr state before checking it
 2016-12-06 09:42:43 -08:00
Antonio Murdaca
1b2d4f3d60
server: sync ctr state before checking it 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-12-06 12:39:38 +01:00
Antonio Murdaca
f2b4fda554
server: fix ctr filter by truncated id 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-12-06 12:16:34 +01:00
Antonio Murdaca
e7492ca12f
server: fix pod filter by truncated id 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-12-06 12:16:30 +01:00
Antonio Murdaca
15f23bc6ac
test: fix apparmor detection 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-12-06 12:10:32 +01:00
Xianglin Gao
4f323377ee add apparmor build tag and update readme 
Signed-off-by: Xianglin Gao <xlgao@zju.edu.cn>
 2016-12-06 11:51:15 +08:00
Xianglin Gao
bec3c3e2aa add test cases 
Signed-off-by: Xianglin Gao <xlgao@zju.edu.cn>
 2016-12-01 21:42:13 +08:00
Antonio Murdaca
78ee03a8fc
add seccomp support 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-11-28 22:05:34 +01:00
Mrunal Patel
d12c4b68ac Merge pull request #212 from runcom/execsync-fix 
execsync: return proper error description
 2016-11-24 08:28:45 -08:00
HaoZhang
bdd817d002 add test for sysctls 
Signed-off-by: HaoZhang <crazykev@zju.edu.cn>
 2016-11-24 20:32:33 +08:00
Antonio Murdaca
cbe2a68ce5
execsync: return proper error description 
The gprc execsync client call doesn't populate `ExecSyncResponse` on
error at all. You just get an error.
This patch modifies the code to include command's streams, exit code
and error direcly into the error. `ocic` will then print useful
infomation in the cli, otherwise it won't.

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-11-24 12:11:04 +01:00
Mrunal Patel
3e415d0c2f Add test for exec sync 
Signed-off-by: Mrunal Patel <mpatel@redhat.com>
 2016-11-21 13:16:36 -08:00
HaoZhang
018c4db06d add test for container/pod metadata in status/list APIs 
Signed-off-by: HaoZhang <crazykev@zju.edu.cn>
 2016-11-02 00:37:40 +08:00
Mrunal Patel
2be40e0a31 Add tests for pod filtering 
Signed-off-by: Mrunal Patel <mpatel@redhat.com>
 2016-10-17 12:51:21 -07:00
Dan Walsh
488216f57b Make sure selinuxenabled exists before executing it 
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
 2016-10-17 08:48:14 -04:00
Dan Walsh
04807d586a Setup proper labeling for running test with selinux 
The rootfs that gets created needs to have an SELinux label that containers
can write to.  Until they get native storage support, this patch will
force the entire storage pool to be labeled in such a way that confined
containers can read/write/execute the content.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
 2016-10-14 17:29:20 -04:00
Mrunal Patel
e1a4b71478 Add more tests for label filtering 
Signed-off-by: Mrunal Patel <mpatel@redhat.com>
 2016-10-14 12:06:10 -07:00
Mrunal Patel
1d58bc8eae Add a test for label filtering 
Signed-off-by: Mrunal Patel <mpatel@redhat.com>
 2016-10-14 09:58:09 -07:00
Mrunal Patel
1bb79c9bbb Add a test for container list filtering 
Signed-off-by: Mrunal Patel <mpatel@redhat.com>
 2016-10-13 12:40:07 -07:00
Antonio Murdaca
8a9395964e
server/sandbox: fix add/release pod/ctr ids and names 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-10-13 18:48:23 +02:00
Aleksa Sarai
9fb23bf0dc
ocid: add config subcommand 
This subcommand is so that users can get a nice commented version of the
ocid configuration file. This comes from the "current" version of the
configuration (allowing somone to get their custom configuration as a
file). It also has a --default option.

In addition, update the tests to use `ocid config` so that we test this
setup (the loading and saving of the options).

Signed-off-by: Aleksa Sarai <asarai@suse.de>
 2016-10-11 21:21:58 +11:00
Aleksa Sarai
3f48986ea0
cmd: switch to --connect and --listen flags 
Signed-off-by: Aleksa Sarai <asarai@suse.de>
 2016-10-11 03:09:59 +11:00
Antonio Murdaca
9b72f29b72
fixups for tests 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-10-08 14:57:45 +02:00
Antonio Murdaca
e0364ec633
add containers restore test 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-10-08 14:46:39 +02:00
Mike Brown
5ac01ec8f3 removing mount from test/testdata/container_redis.json 
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
 2016-10-07 12:32:11 -05:00
Mrunal Patel
d4a09fd5c8 Merge pull request #93 from cyphar/dockerless-pause-rootfs 
Dockerless pause rootfs
 2016-10-03 10:06:04 -07:00
Aleksa Sarai
bac579a9e5
server: create pause rootfs manually without Docker 
This lessens the Docker requirement for creating sandboxes (with the
requirement only existing for the actual image pulling that is done when
adding a container to a pod). The interface was chosen to match the
--conmon interface, so that the location of the pause binary can be
chosen by a user.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
 2016-10-02 20:11:07 +11:00
Aleksa Sarai
498d2d602e
test: add more debugging output 
In several places, we previously didn't output the $output of the
failing command, leading to confusion when debugging. A proper fix is to
alias oci{c,d} in helpers.sh like runC does, but that can come later.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
 2016-10-02 19:13:00 +11:00
Mrunal Patel
23858b7ed6 Add pod list and ctr list calls to ctr lifecycle test 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-30 12:24:16 -07:00
Mrunal Patel
a2c2d0d6f1 Add container lifecycle test 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-29 13:33:47 -07:00
Dan Walsh
f51c98b057 Install conmon in /usr/libexec/ocid/conmon 
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
 2016-09-29 08:55:12 -04:00
Mrunal Patel
c647c908a2 Add a test for pod remove 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-28 13:15:57 -07:00
Antonio Murdaca
17ae9d5d01 Merge pull request #72 from mrunalp/ctr_remove_stop 
Stop container first if it is running on RemoveContainer
 2016-09-28 22:03:57 +02:00
Mrunal Patel
52ff9e46dc Add a test for ctr remove 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-28 12:54:57 -07:00
Mrunal Patel
189b642908 Remove unnecessary sleep from tests 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-28 12:16:10 -07:00
Mrunal Patel
fd91998ef3 Fix the test by removing sleep and ensuring cleanup 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-27 11:46:16 -07:00
Antonio Murdaca
77c40487de
test: suggests sudo make localintegration 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-27 14:23:07 +02:00
Antonio Murdaca
22cd20e705
test: fix readme and sleep just 1 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-27 10:46:50 +02:00
Antonio Murdaca
ab8b65b09e
test: cleanup pods at test teardown 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-27 10:46:50 +02:00
Antonio Murdaca
3ddf3f21c1
test: fix and add tests 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-27 10:42:53 +02:00
Mrunal Patel
4606f2a61a Fix the build for ocid to cri-o rename 
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
 2016-09-26 16:55:12 -07:00
Antonio Murdaca
8f2744785e
test: add README.md 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-24 09:59:27 +02:00
Antonio Murdaca
aebd365cf4
test: tweak halpers 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-24 00:38:06 +02:00
Antonio Murdaca
5fb0252fd2
add tests skeleton 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
 2016-09-24 00:37:07 +02:00