test/TEST-13-NSPAWN-SMOKE/test.sh

   1 #!/bin/bash
   2 # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
   3 # ex: ts=8 sw=4 sts=4 et filetype=sh
   4 set -e
   5 TEST_DESCRIPTION="systemd-nspawn smoke test"
   6 TEST_NO_NSPAWN=1
   7 SKIP_INITRD=yes
   8 . $TEST_BASE_DIR/test-functions
   9
  10 test_setup() {
  11     create_empty_image
  12     mkdir -p $TESTDIR/root
  13     mount ${LOOPDEV}p1 $TESTDIR/root
  14
  15     # Create what will eventually be our root filesystem onto an overlay
  16     (
  17         LOG_LEVEL=5
  18         eval $(udevadm info --export --query=env --name=${LOOPDEV}p2)
  19
  20         setup_basic_environment
  21         dracut_install busybox chmod rmdir unshare ip
  22
  23         cp create-busybox-container $initdir/
  24
  25         ./create-busybox-container $initdir/nc-container
  26         initdir="$initdir/nc-container" dracut_install nc ip
  27
  28         # setup the testsuite service
  29         cat >$initdir/etc/systemd/system/testsuite.service <<EOF
  30 [Unit]
  31 Description=Testsuite service
  32 After=multi-user.target
  33
  34 [Service]
  35 ExecStart=/test-nspawn.sh
  36 Type=oneshot
  37 StandardOutput=tty
  38 StandardError=tty
  39 EOF
  40
  41         cat >$initdir/test-nspawn.sh <<'EOF'
  42 #!/bin/bash
  43 set -x
  44 set -e
  45 set -u
  46 set -o pipefail
  47
  48 export SYSTEMD_LOG_LEVEL=debug
  49
  50 # check cgroup-v2
  51 is_v2_supported=no
  52 mkdir -p /tmp/cgroup2
  53 if mount -t cgroup2 cgroup2 /tmp/cgroup2; then
  54     is_v2_supported=yes
  55     umount /tmp/cgroup2
  56 fi
  57 rmdir /tmp/cgroup2
  58
  59 # check cgroup namespaces
  60 is_cgns_supported=no
  61 if [[ -f /proc/1/ns/cgroup ]]; then
  62     is_cgns_supported=yes
  63 fi
  64
  65 is_user_ns_supported=no
  66 if unshare -U sh -c :; then
  67     is_user_ns_supported=yes
  68 fi
  69
  70 function check_bind_tmp_path {
  71     # https://github.com/systemd/systemd/issues/4789
  72     local _root="/var/lib/machines/bind-tmp-path"
  73     /create-busybox-container "$_root"
  74     >/tmp/bind
  75     systemd-nspawn --register=no -D "$_root" --bind=/tmp/bind /bin/sh -c 'test -e /tmp/bind'
  76 }
  77
  78 function check_notification_socket {
  79     # https://github.com/systemd/systemd/issues/4944
  80     local _cmd='echo a | $(busybox which nc) -U -u -w 1 /run/systemd/nspawn/notify'
  81     systemd-nspawn --register=no -D /nc-container /bin/sh -x -c "$_cmd"
  82     systemd-nspawn --register=no -D /nc-container -U /bin/sh -x -c "$_cmd"
  83 }
  84
  85 function run {
  86     if [[ "$1" = "yes" && "$is_v2_supported" = "no" ]]; then
  87         printf "Unified cgroup hierarchy is not supported. Skipping.\n" >&2
  88         return 0
  89     fi
  90     if [[ "$2" = "yes" && "$is_cgns_supported" = "no" ]];  then
  91         printf "Cgroup namespaces are not supported. Skipping.\n" >&2
  92         return 0
  93     fi
  94
  95     local _root="/var/lib/machines/unified-$1-cgns-$2-api-vfs-writable-$3"
  96     /create-busybox-container "$_root"
  97     UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" -b
  98     UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" --private-network -b
  99
 100     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" -U -b; then
 101        [[ "$is_user_ns_supported" = "yes" && "$3" = "network" ]] && return 1
 102     else
 103        [[ "$is_user_ns_supported" = "no" && "$3" = "network" ]] && return 1
 104     fi
 105
 106     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" --private-network -U -b; then
 107        [[ "$is_user_ns_supported" = "yes" && "$3" = "yes" ]] && return 1
 108     else
 109        [[ "$is_user_ns_supported" = "no" && "$3" = "yes" ]] && return 1
 110     fi
 111
 112     local _netns_opt="--network-namespace-path=/proc/self/ns/net"
 113
 114     # --network-namespace-path and network-related options cannot be used together
 115     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-interface=lo -b; then
 116        return 1
 117     fi
 118
 119     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-macvlan=lo -b; then
 120        return 1
 121     fi
 122
 123     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-ipvlan=lo -b; then
 124        return 1
 125     fi
 126
 127     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-veth -b; then
 128        return 1
 129     fi
 130
 131     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-veth-extra=lo -b; then
 132        return 1
 133     fi
 134
 135     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-bridge=lo -b; then
 136        return 1
 137     fi
 138
 139     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --network-zone=zone -b; then
 140        return 1
 141     fi
 142
 143     if UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" --private-network -b; then
 144        return 1
 145     fi
 146
 147     # test --network-namespace-path works with a network namespace created by "ip netns"
 148     ip netns add nspawn_test
 149     _netns_opt="--network-namespace-path=/run/netns/nspawn_test"
 150     UNIFIED_CGROUP_HIERARCHY="$1" SYSTEMD_NSPAWN_USE_CGNS="$2" SYSTEMD_NSPAWN_API_VFS_WRITABLE="$3" systemd-nspawn --register=no -D "$_root" "$_netns_opt" /bin/ip a | grep -v -E '^1: lo.*UP'
 151     local r=$?
 152     ip netns del nspawn_test
 153
 154     if [ $r -ne 0 ]; then
 155        return 1
 156     fi
 157
 158     return 0
 159 }
 160
 161 check_bind_tmp_path
 162
 163 check_notification_socket
 164
 165 for api_vfs_writable in yes no network; do
 166     run no no $api_vfs_writable
 167     run yes no $api_vfs_writable
 168     run no yes $api_vfs_writable
 169     run yes yes $api_vfs_writable
 170 done
 171
 172 touch /testok
 173 EOF
 174
 175         chmod 0755 $initdir/test-nspawn.sh
 176         setup_testsuite
 177     ) || return 1
 178
 179     ddebug "umount $TESTDIR/root"
 180     umount $TESTDIR/root
 181 }
 182
 183 do_test "$@"