Function TestGetUsernsForNamespace

pkg/sys/namespace_linux_test.go:31–100

(t *testing.T)

)

func TestGetUsernsForNamespace(t *testing.T) {
	testutil.RequiresRoot(t)

	t.Parallel()

	k409 := kernel.KernelVersion{Kernel: 4, Major: 9}
	ok, err := kernel.GreaterEqualThan(k409)
	require.NoError(t, err)
	if !ok {
		t.Skip("Requires kernel >= 4.9")
	}

	tmpDir := t.TempDir()

	f, err := os.CreateTemp(tmpDir, "netns")
	require.NoError(t, err)

	netnsPath := f.Name()
	f.Close()

	defer testutil.Unmount(t, netnsPath)

	currentUsernsIno, err := getNamespaceInode(os.Getpid(), "user")
	require.NoError(t, err)

	usernsIno := uint64(0)
	uerr := UnshareAfterEnterUserns("0:1000:10", "0:1000:10", syscall.CLONE_NEWNET, func(pid int) error {
		err := unix.Mount(
			fmt.Sprintf("/proc/%d/ns/net", pid),
			netnsPath,
			"",
			unix.MS_BIND|unix.MS_RDONLY,
			"",
		)
		if err != nil {
			return err
		}

		usernsIno, err = getNamespaceInode(pid, "user")
		if err != nil {
			return err
		}
		return nil
	})
	require.NoError(t, uerr)

	require.NotEqual(t, currentUsernsIno, usernsIno)
	t.Logf("Current user namespace [%d], new user namespace [%d]", currentUsernsIno, usernsIno)

	netnsFd, err := os.Open(netnsPath)
	require.NoError(t, err)
	defer netnsFd.Close()

	usernsFd, err := GetUsernsForNamespace(netnsFd.Fd())
	require.NoError(t, err)
	defer usernsFd.Close()

	usernsInoFromNetnsFd := getInode(t, usernsFd)