Method runNetNamespaceCheck

src/tests/environment.cpp:407–452

  }

  Option<Error> runNetNamespaceCheck(const Owned<Docker>& docker)
  {
    const string image =
      string(mesos::internal::checks::DOCKER_HEALTH_CHECK_IMAGE);

    // Use `os::system` here because `docker->inspect()` only works on
    // containers even though `docker inspect` cli command works on images.
    const Option<int> res = os::system(strings::join(
        " ",
        docker->getPath(),
        "-H",
        docker->getSocket(),
        "inspect",
        image,
        "> NUL"));

    if (res != 0) {
      return Error("Cannot find " + image);
    }

    // Launch two containers. One with regular network settings and the
    // other with "--network=container:<ID>" to enter the first container's
    // namespace.
    const string container1 = id::UUID::random().toString();
    const string container2 = id::UUID::random().toString();

    Future<Nothing> containers =
      launchContainer(docker, container1, "nat", image)
        .then(process::defer([=]() {
          return launchContainer(
              docker, container2, "container:" + container1, image)
            .then(lambda::bind(&Docker::rm, docker, container2, true))
            .onAny(lambda::bind(&Docker::rm, docker, container1, true));
      }));

    // A minute should be enough for both containers to lauch and delete.
    containers.await(Minutes(1));

    if (containers.isFailed()) {
      return Error("Failed to launch containers: " + containers.failure());
    } else if (!containers.isReady()) {
      return Error("Container launch timed out");
    }

    return None();
  }
#endif // __WINDOWS__

  Option<Error> dockerError;