Function testIDMapMountWithAttrs

core/mount/mount_idmapped_linux_test.go:158–198

(t *testing.T)

}

func testIDMapMountWithAttrs(t *testing.T) {
	usernsFD, err := getUsernsFD(testUIDMaps, testGIDMaps)
	require.NoError(t, err)
	defer usernsFD.Close()

	type testCase struct {
		name      string
		srcDir    string
		setAttr   uint64
		checkFunc func(destDir string)
	}

	cases := make([]testCase, 0)
	srcDir, checkFunc := initIDMappedChecker(t, testUIDMaps, testGIDMaps, true)
	cases = append(cases, testCase{
		name:      "Writable idmapped mount",
		srcDir:    srcDir,
		setAttr:   0,
		checkFunc: checkFunc,
	})

	srcDir, checkFunc = initIDMappedChecker(t, testUIDMaps, testGIDMaps, false)
	cases = append(cases, testCase{
		name:      "Readonly idmapped mount",
		srcDir:    srcDir,
		setAttr:   unix.MOUNT_ATTR_RDONLY,
		checkFunc: checkFunc,
	})

	for _, tc := range cases {
		t.Run(tc.name, func(t *testing.T) {
			destDir := t.TempDir()
			defer func() {
				require.NoError(t, UnmountAll(destDir, 0))
			}()
			err := IDMapMountWithAttrs(tc.srcDir, destDir, int(usernsFD.Fd()), tc.setAttr, 0)
			require.NoError(t, err)
			tc.checkFunc(destDir)
		})
	}
}

func initIDMappedChecker(t *testing.T, uidMaps, gidMaps []syscall.SysProcIDMap, expectWritable bool) (_srcDir string, _verifyFunc func(destDir string)) {
	testutil.RequiresRoot(t)