clearlinux/docker
2
0
Fork 0
mirror of https://github.com/clearlinux/docker.git synced 2026-10-04 15:58:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Mount /dev in tmpfs for privileged containers

Browse Source 
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
Michael Crosby
2014-05-20 22:51:24 +00:00
parent 83e9dc7200
commit 34c05c58c8
8 changed files with 83 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/libcontainer/container_test.go
+15 -6
View File
@@ -4,12 +4,14 @@ import (
"encoding/json"
"os"
"testing"
"github.com/dotcloud/docker/pkg/libcontainer/mount/nodes"
)
// Checks whether the expected capability is specified in the capabilities.
func hasCapability(expected string, capabilities []string) bool {
for _, capability := range capabilities {
if capability == expected {
func contains(expected string, values []string) bool {
for _, v := range values {
if v == expected {
return true
}
}
@@ -47,18 +49,25 @@ func TestContainerJsonFormat(t *testing.T) {
t.Fail()
}
if hasCapability("SYS_ADMIN", container.Capabilities) {
if contains("SYS_ADMIN", container.Capabilities) {
t.Log("SYS_ADMIN should not be enabled in capabilities mask")
t.Fail()
}
if !hasCapability("MKNOD", container.Capabilities) {
if !contains("MKNOD", container.Capabilities) {
t.Log("MKNOD should be enabled in capabilities mask")
t.Fail()
}
if hasCapability("SYS_CHROOT", container.Capabilities) {
if contains("SYS_CHROOT", container.Capabilities) {
t.Log("capabilities mask should not contain SYS_CHROOT")
t.Fail()
}
for _, n := range nodes.DefaultNodes {
if !contains(n, container.DeviceNodes["required"]) {
t.Logf("devices should contain %s", n)
t.Fail()
}
}
}