64 lines
1.3 KiB
Go
64 lines
1.3 KiB
Go
package libcontainer
|
|
|
|
import (
|
|
"encoding/json"
|
|
"os"
|
|
"testing"
|
|
)
|
|
|
|
// Checks whether the expected capability is specified in the capabilities.
|
|
func hasCapability(expected string, capabilities []string) bool {
|
|
for _, capability := range capabilities {
|
|
if capability == expected {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func TestContainerJsonFormat(t *testing.T) {
|
|
f, err := os.Open("container.json")
|
|
if err != nil {
|
|
t.Fatal("Unable to open container.json")
|
|
}
|
|
defer f.Close()
|
|
|
|
var container *Container
|
|
if err := json.NewDecoder(f).Decode(&container); err != nil {
|
|
t.Fatalf("failed to decode container config: %s", err)
|
|
}
|
|
if container.Hostname != "koye" {
|
|
t.Log("hostname is not set")
|
|
t.Fail()
|
|
}
|
|
|
|
if !container.Tty {
|
|
t.Log("tty should be set to true")
|
|
t.Fail()
|
|
}
|
|
|
|
if !container.Namespaces["NEWNET"] {
|
|
t.Log("namespaces should contain NEWNET")
|
|
t.Fail()
|
|
}
|
|
|
|
if container.Namespaces["NEWUSER"] {
|
|
t.Log("namespaces should not contain NEWUSER")
|
|
t.Fail()
|
|
}
|
|
|
|
if hasCapability("SYS_ADMIN", container.Capabilities) {
|
|
t.Log("SYS_ADMIN should not be enabled in capabilities mask")
|
|
t.Fail()
|
|
}
|
|
|
|
if !hasCapability("MKNOD", container.Capabilities) {
|
|
t.Log("MKNOD should be enabled in capabilities mask")
|
|
t.Fail()
|
|
}
|
|
|
|
if hasCapability("SYS_CHROOT", container.Capabilities) {
|
|
t.Log("capabilities mask should not contain SYS_CHROOT")
|
|
t.Fail()
|
|
}
|
|
}
|