Compare commits
19 commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
8cc124de4b |
||
|
|
2748c7baf2 |
||
|
|
cb252a8a45 |
||
|
|
90f9a5e1b5 |
||
|
|
a94a4c1f2f |
||
|
fec18b5596 | ||
|
|
29e6ea0f36 |
||
|
|
35e1e8f820 |
||
|
|
e4323a324f |
||
|
|
eddc8436e4 |
||
|
|
78914c7229 | ||
|
|
79dac38ffc | ||
|
e3a789b9e7 |
||
|
|
8af5ee9ce7 | ||
|
2bb7eade8f | ||
|
|
f820d42ee5 | ||
|
5c4f803a8a | ||
|
|
13af637c99 | ||
|
|
06669ea343 |
15 changed files with 65 additions and 660 deletions
|
|
@ -1 +0,0 @@
|
|||
1
|
||||
34
.gitignore
vendored
34
.gitignore
vendored
|
|
@ -68,37 +68,3 @@ crun-0.1.1.tar.gz
|
|||
/crun-1.8.1.tar.xz
|
||||
/crun-1.8.2.tar.xz
|
||||
/crun-1.8.3.tar.xz
|
||||
/crun-1.8.4.tar.xz
|
||||
/crun-1.8.5.tar.xz
|
||||
/crun-1.8.6.tar.xz
|
||||
/crun-1.8.7.tar.xz
|
||||
/crun-1.9.tar.xz
|
||||
/crun-1.9.1.tar.xz
|
||||
/crun-1.9.2.tar.xz
|
||||
/crun-1.10.tar.xz
|
||||
/crun-1.11.tar.xz
|
||||
/crun-1.11.1.tar.xz
|
||||
/crun-1.11.2.tar.xz
|
||||
/crun-1.12.tar.xz
|
||||
/crun-1.13.tar.xz
|
||||
/crun-1.14.tar.xz
|
||||
/crun-1.14.1.tar.xz
|
||||
/crun-1.14.2.tar.xz
|
||||
/crun-1.14.3.tar.xz
|
||||
/crun-1.14.4.tar.xz
|
||||
/crun-1.15.tar.zst
|
||||
/crun-1.17.tar.zst
|
||||
/crun-1.18.tar.zst
|
||||
/crun-1.18.1.tar.zst
|
||||
/crun-1.18.2.tar.zst
|
||||
/crun-1.19.tar.zst
|
||||
/crun-1.19.1.tar.zst
|
||||
/crun-1.20.tar.zst
|
||||
/crun-1.21.tar.zst
|
||||
/crun-1.22.tar.zst
|
||||
/crun-1.23.tar.zst
|
||||
/crun-1.23.1.tar.zst
|
||||
/crun-1.24.tar.zst
|
||||
/crun-1.25.tar.zst
|
||||
/crun-1.25.1.tar.zst
|
||||
/crun-1.26.tar.zst
|
||||
|
|
|
|||
140
.packit.yaml
140
.packit.yaml
|
|
@ -1,140 +0,0 @@
|
|||
---
|
||||
# See the documentation for more information:
|
||||
# https://packit.dev/docs/configuration/
|
||||
|
||||
downstream_package_name: crun
|
||||
|
||||
# Ref: https://packit.dev/docs/configuration#files_to_sync
|
||||
files_to_sync:
|
||||
- src: rpm/gating.yaml
|
||||
dest: gating.yaml
|
||||
- src: plans/
|
||||
dest: plans/
|
||||
delete: true
|
||||
mkpath: true
|
||||
- src: tests/tmt/
|
||||
dest: tests/tmt/
|
||||
delete: true
|
||||
mkpath: true
|
||||
- src: .fmf/
|
||||
dest: .fmf/
|
||||
delete: true
|
||||
mkpath: true
|
||||
- .packit.yaml
|
||||
|
||||
packages:
|
||||
crun-fedora:
|
||||
pkg_tool: fedpkg
|
||||
specfile_path: rpm/crun.spec
|
||||
crun-centos:
|
||||
pkg_tool: centpkg
|
||||
specfile_path: rpm/crun.spec
|
||||
crun-eln:
|
||||
specfile_path: rpm/crun.spec
|
||||
|
||||
srpm_build_deps:
|
||||
- git-archive-all
|
||||
- make
|
||||
|
||||
actions:
|
||||
# This action runs only on copr build jobs
|
||||
create-archive:
|
||||
- "git-archive-all -v --force-submodules rpm/crun-HEAD.tar.xz"
|
||||
- bash -c "ls -1 rpm/crun-HEAD.tar.xz"
|
||||
|
||||
jobs:
|
||||
- job: copr_build
|
||||
trigger: pull_request
|
||||
packages: [crun-fedora]
|
||||
notifications: &copr_build_failure_notification
|
||||
failure_comment:
|
||||
message: "Ephemeral COPR build failed. @containers/packit-build please check."
|
||||
targets: &fedora_copr_targets
|
||||
- fedora-all-x86_64
|
||||
- fedora-all-aarch64
|
||||
|
||||
- job: copr_build
|
||||
trigger: pull_request
|
||||
packages: [crun-eln]
|
||||
notifications: *copr_build_failure_notification
|
||||
targets:
|
||||
- fedora-eln-x86_64
|
||||
- fedora-eln-aarch64
|
||||
|
||||
- job: copr_build
|
||||
trigger: pull_request
|
||||
packages: [crun-centos]
|
||||
notifications: *copr_build_failure_notification
|
||||
targets: ¢os_copr_targets
|
||||
- centos-stream-9-x86_64
|
||||
- centos-stream-9-aarch64
|
||||
- centos-stream-10-x86_64
|
||||
- centos-stream-10-aarch64
|
||||
|
||||
# Run on commit to main branch
|
||||
- job: copr_build
|
||||
trigger: commit
|
||||
packages: [crun-fedora]
|
||||
notifications:
|
||||
failure_comment:
|
||||
message: "podman-next COPR build failed. @containers/packit-build please check."
|
||||
branch: main
|
||||
owner: rhcontainerbot
|
||||
project: podman-next
|
||||
|
||||
# Podman system tests for Fedora and CentOS Stream
|
||||
- job: tests
|
||||
trigger: pull_request
|
||||
packages: [crun-fedora]
|
||||
notifications: &test_failure_notification
|
||||
failure_comment:
|
||||
message: "TMT tests failed. @containers/packit-build please check."
|
||||
targets: *fedora_copr_targets
|
||||
tf_extra_params:
|
||||
environments:
|
||||
- artifacts:
|
||||
- type: repository-file
|
||||
id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/fedora-$releasever/rhcontainerbot-podman-next-fedora-$releasever.repo
|
||||
|
||||
# Podman system tests for CentOS Stream
|
||||
- job: tests
|
||||
trigger: pull_request
|
||||
packages: [crun-centos]
|
||||
notifications: *test_failure_notification
|
||||
# TODO: Re-enable centos-stream-10-x86_64 once criu issues are solved
|
||||
# Ref: https://github.com/containers/crun/pull/1758#issuecomment-2901772392
|
||||
# Issue filed: https://github.com/containers/crun/issues/1759
|
||||
#targets: *centos_copr_targets
|
||||
targets:
|
||||
- centos-stream-9-x86_64
|
||||
- centos-stream-9-aarch64
|
||||
- centos-stream-10-aarch64
|
||||
tf_extra_params:
|
||||
environments:
|
||||
- artifacts:
|
||||
- type: repository-file
|
||||
id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/centos-stream-$releasever/rhcontainerbot-podman-next-centos-stream-$releasever.repo
|
||||
|
||||
- job: propose_downstream
|
||||
trigger: release
|
||||
packages: [crun-fedora]
|
||||
dist_git_branches: &fedora_targets
|
||||
- fedora-all
|
||||
|
||||
# Disabled until we're switching to Packit for CentOS Stream
|
||||
- job: propose_downstream
|
||||
trigger: ignore
|
||||
packages: [crun-centos]
|
||||
dist_git_branches:
|
||||
- c10s
|
||||
|
||||
- job: koji_build
|
||||
trigger: commit
|
||||
packages: [crun-fedora]
|
||||
dist_git_branches: *fedora_targets
|
||||
|
||||
- job: bodhi_update
|
||||
trigger: commit
|
||||
packages: [crun-fedora]
|
||||
dist_git_branches:
|
||||
- fedora-branched # rawhide updates are created automatically
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
This repository is maintained by packit.
|
||||
https://packit.dev/
|
||||
The file was generated using packit 1.13.0.post1.dev2+g84134016c.
|
||||
156
crun.spec
156
crun.spec
|
|
@ -1,140 +1,112 @@
|
|||
%global krun_opts %{nil}
|
||||
%global wasmedge_opts %{nil}
|
||||
%global yajl_opts %{nil}
|
||||
|
||||
%if %{defined copr_username}
|
||||
%define copr_build 1
|
||||
%endif
|
||||
|
||||
# krun and wasm support only on aarch64 and x86_64
|
||||
%if 0%{?fedora} >= 37
|
||||
%ifarch aarch64 || x86_64
|
||||
|
||||
%if %{defined fedora}
|
||||
# krun only exists on fedora
|
||||
%global krun_support 1
|
||||
%global krun_support enabled
|
||||
%global krun_opts --with-libkrun
|
||||
|
||||
# Keep wasmedge enabled only on Fedora. It breaks a lot on EPEL.
|
||||
%global wasm_support 1
|
||||
%global wasmedge_support 1
|
||||
%global wasmedge_opts --with-wasmedge
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# wasmedge built only for aarch64 and x86_64
|
||||
%ifarch aarch64 || x86_64
|
||||
%global wasm_support enabled
|
||||
%global wasm_opts --with-wasmedge
|
||||
%endif
|
||||
|
||||
%if %{defined fedora} || (%{defined rhel} && 0%{?rhel} < 10)
|
||||
%global system_yajl 1
|
||||
%else
|
||||
%global yajl_opts --enable-embedded-yajl
|
||||
%endif
|
||||
%global built_tag 1.8.3
|
||||
%global gen_version %(b=%{built_tag}; echo ${b/-/"~"})
|
||||
|
||||
Summary: OCI runtime written in C
|
||||
Name: crun
|
||||
%if %{defined copr_build}
|
||||
Epoch: 102
|
||||
%endif
|
||||
# DO NOT TOUCH the Version string!
|
||||
# The TRUE source of this specfile is:
|
||||
# https://github.com/containers/crun/blob/main/rpm/crun.spec
|
||||
# If that's what you're reading, Version must be 0, and will be updated by Packit for
|
||||
# copr and koji builds.
|
||||
# If you're reading this on dist-git, the version is automatically filled in by Packit.
|
||||
Version: 1.26
|
||||
Release: %autorelease
|
||||
Version: %{gen_version}
|
||||
URL: https://github.com/containers/%{name}
|
||||
Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.zst
|
||||
License: GPL-2.0-only
|
||||
%if %{defined golang_arches_future}
|
||||
ExclusiveArch: %{golang_arches_future}
|
||||
%else
|
||||
ExclusiveArch: aarch64 ppc64le riscv64 s390x x86_64
|
||||
%endif
|
||||
# Fetched from upstream
|
||||
Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.xz
|
||||
License: GPLv2+
|
||||
Release: %autorelease
|
||||
ExclusiveArch: %{golang_arches}
|
||||
BuildRequires: autoconf
|
||||
BuildRequires: automake
|
||||
BuildRequires: go-md2man
|
||||
BuildRequires: libtool
|
||||
BuildRequires: gcc
|
||||
BuildRequires: git-core
|
||||
BuildRequires: gperf
|
||||
BuildRequires: python3
|
||||
BuildRequires: libcap-devel
|
||||
%if %{defined krun_support}
|
||||
BuildRequires: systemd-devel
|
||||
BuildRequires: yajl-devel
|
||||
BuildRequires: libgcrypt-devel
|
||||
%if "%{krun_support}" == "enabled"
|
||||
BuildRequires: libkrun-devel
|
||||
%endif
|
||||
BuildRequires: systemd-devel
|
||||
%if %{defined system_yajl}
|
||||
BuildRequires: yajl-devel
|
||||
%endif
|
||||
BuildRequires: libseccomp-devel
|
||||
BuildRequires: python3-libmount
|
||||
BuildRequires: libtool
|
||||
BuildRequires: protobuf-c-devel
|
||||
BuildRequires: criu-devel >= 3.17.1-2
|
||||
Recommends: criu >= 3.17.1
|
||||
Recommends: criu-libs
|
||||
%if %{defined wasmedge_support}
|
||||
%if "%{wasm_support}" == "enabled"
|
||||
BuildRequires: wasmedge-devel
|
||||
%endif
|
||||
BuildRequires: python
|
||||
BuildRequires: libseccomp-devel
|
||||
BuildRequires: libselinux-devel
|
||||
BuildRequires: python3-libmount
|
||||
BuildRequires: make
|
||||
BuildRequires: glibc-static
|
||||
BuildRequires: protobuf-c-devel
|
||||
%ifnarch %ix86
|
||||
BuildRequires: criu-devel >= 3.17.1-2
|
||||
%endif
|
||||
Recommends: criu >= 3.17.1
|
||||
Recommends: criu-libs
|
||||
Provides: oci-runtime
|
||||
|
||||
%description
|
||||
%{name} is a OCI runtime
|
||||
|
||||
%if %{defined krun_support}
|
||||
%package krun
|
||||
Summary: %{name} with libkrun support
|
||||
Requires: libkrun
|
||||
Requires: %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
|
||||
Provides: krun = %{?epoch:%{epoch}:}%{version}-%{release}
|
||||
|
||||
%description krun
|
||||
krun is a symlink to the %{name} binary, with libkrun as an additional dependency.
|
||||
%endif
|
||||
|
||||
%if %{defined wasm_support}
|
||||
%package wasm
|
||||
Summary: %{name} with wasm support
|
||||
Requires: %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
|
||||
# wasm packages are not present on RHEL yet and are currently a PITA to test
|
||||
# Best to only include wasmedge as weak dep on rhel
|
||||
%if %{defined fedora}
|
||||
Requires: wasm-library
|
||||
%endif
|
||||
Recommends: wasmedge
|
||||
|
||||
%description wasm
|
||||
%{name}-wasm is a symlink to the %{name} binary, with wasm as an additional dependency.
|
||||
%endif
|
||||
%{name} is a runtime for running OCI containers
|
||||
|
||||
%prep
|
||||
%autosetup -Sgit -n %{name}-%{version}
|
||||
%autosetup -Sgit %{name}-%{built_tag}
|
||||
|
||||
%build
|
||||
./autogen.sh
|
||||
./configure --disable-silent-rules %{krun_opts} %{wasmedge_opts} %{yajl_opts}
|
||||
%configure --disable-silent-rules %{krun_opts} %{wasm_opts}
|
||||
%make_build
|
||||
|
||||
%install
|
||||
%make_install prefix=%{_prefix}
|
||||
%make_install
|
||||
rm -rf %{buildroot}%{_prefix}/lib*
|
||||
%if "%{krun_support}" == "enabled"
|
||||
ln -s ../bin/%{name} %{buildroot}%{_bindir}/krun
|
||||
%endif
|
||||
|
||||
# Placeholder check to silence rpmlint
|
||||
%check
|
||||
%if "%{wasm_support}" == "enabled"
|
||||
ln -s ../bin/%{name} %{buildroot}%{_bindir}/%{name}-wasm
|
||||
%endif
|
||||
|
||||
%files
|
||||
%license COPYING
|
||||
%{_bindir}/%{name}
|
||||
%{_mandir}/man1/%{name}.1.gz
|
||||
%{_mandir}/man1/*
|
||||
|
||||
%if "%{krun_support}" == "enabled"
|
||||
%package krun
|
||||
Summary: OCI Runtime providing Virtualization-based process isolation capabilities.
|
||||
Provides: krun
|
||||
Requires: %{name} = %{version}-%{release}
|
||||
Requires: libkrun
|
||||
|
||||
%description krun
|
||||
%{name}-krun OCI Runtime providing Virtualization-based process isolation capabilities.
|
||||
|
||||
%if %{defined krun_support}
|
||||
%files krun
|
||||
%license COPYING
|
||||
%{_bindir}/krun
|
||||
%{_mandir}/man1/krun.1.gz
|
||||
%endif
|
||||
|
||||
%if %{defined wasm_support}
|
||||
%if "%{wasm_support}" == "enabled"
|
||||
%package wasm
|
||||
Summary: wasm support for %{name}
|
||||
Requires: wasm-library
|
||||
Recommends: wasmedge
|
||||
Requires: %{name} = %{version}-%{release}
|
||||
|
||||
%description wasm
|
||||
%{name}-wasm provides %{name} built with wasm support
|
||||
|
||||
%files wasm
|
||||
%license COPYING
|
||||
%{_bindir}/%{name}-wasm
|
||||
%endif
|
||||
|
||||
|
|
|
|||
15
gating.yaml
15
gating.yaml
|
|
@ -1,15 +0,0 @@
|
|||
--- !Policy
|
||||
product_versions:
|
||||
- fedora-*
|
||||
decision_contexts:
|
||||
- bodhi_update_push_stable
|
||||
- bodhi_update_push_testing
|
||||
rules:
|
||||
- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
|
||||
|
||||
--- !Policy
|
||||
product_versions:
|
||||
- rhel-*
|
||||
decision_context: osci_compose_gate
|
||||
rules:
|
||||
- !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}
|
||||
|
|
@ -1,40 +0,0 @@
|
|||
discover:
|
||||
how: fmf
|
||||
execute:
|
||||
how: tmt
|
||||
prepare:
|
||||
- when: distro == centos-stream or distro == rhel
|
||||
how: shell
|
||||
script: |
|
||||
dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-$(rpm --eval '%{?rhel}').noarch.rpm
|
||||
dnf -y config-manager --set-enabled epel
|
||||
order: 10
|
||||
- when: initiator == packit
|
||||
how: shell
|
||||
script: |
|
||||
COPR_REPO_FILE="/etc/yum.repos.d/*podman-next*.repo"
|
||||
if compgen -G $COPR_REPO_FILE > /dev/null; then
|
||||
sed -i -n '/^priority=/!p;$apriority=1' $COPR_REPO_FILE
|
||||
fi
|
||||
dnf -y upgrade --allowerasing
|
||||
order: 20
|
||||
- how: install
|
||||
package:
|
||||
- bats
|
||||
- crun
|
||||
- podman-tests
|
||||
|
||||
/shellcheck:
|
||||
discover+:
|
||||
filter: 'tag:shellcheck'
|
||||
enabled: true
|
||||
adjust:
|
||||
enabled: false
|
||||
when: distro == centos-stream-10 or distro == rhel-10
|
||||
prepare+:
|
||||
- how: install
|
||||
package: ShellCheck
|
||||
|
||||
/tests:
|
||||
discover+:
|
||||
filter: 'tag:podman | tag:sanity'
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
/:
|
||||
inherit: false
|
||||
|
||||
summary: Run tmt's integration tests
|
||||
plan:
|
||||
import:
|
||||
url: https://github.com/teemtee/tmt
|
||||
path: /plans/friends
|
||||
name: /podman
|
||||
2
sources
2
sources
|
|
@ -1 +1 @@
|
|||
SHA512 (crun-1.26.tar.zst) = 0785af6095a26290f433c5739bea5d98a029c3f0e8efbeed420481849ebddd70acde6c1105133c392abf26bca90d232cced5e5994da7506d66a020a02c129fb3
|
||||
SHA512 (crun-1.8.3.tar.xz) = ac3a99c6d17724d356eb22af81c2b94f91d98d69763c34773260e549b159b1da5298a4387efa89615c510a24d65dc002ca3dce6dfb93ca5aa7513f328dbdb6ed
|
||||
|
|
|
|||
|
|
@ -1,7 +0,0 @@
|
|||
adjust:
|
||||
duration: 10m
|
||||
when: arch == aarch64
|
||||
|
||||
summary: Run crun specific Podman tests
|
||||
test: bash ./system-test.sh
|
||||
tag: [ podman ]
|
||||
|
|
@ -1,17 +0,0 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
set -exo pipefail
|
||||
|
||||
if [[ "$(id -u)" -ne 0 ]];then
|
||||
echo "Please run this script as superuser"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
cat /etc/redhat-release
|
||||
rpm -q conmon containers-common crun podman podman-tests
|
||||
|
||||
# Run crun specific podman tests
|
||||
bats -t /usr/share/podman/test/system/030-run.bats
|
||||
bats -t /usr/share/podman/test/system/075-exec.bats
|
||||
bats -t /usr/share/podman/test/system/280-update.bats
|
||||
bats -t /usr/share/podman/test/system/520-checkpoint.bats
|
||||
|
|
@ -1,180 +0,0 @@
|
|||
{
|
||||
"ociVersion": "1.0.0",
|
||||
"process": {
|
||||
"terminal": false,
|
||||
"user": {
|
||||
"uid": 0,
|
||||
"gid": 0
|
||||
},
|
||||
"args": [
|
||||
"sleep", "10"
|
||||
],
|
||||
"env": [
|
||||
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
|
||||
"TERM=xterm"
|
||||
],
|
||||
"cwd": "/",
|
||||
"capabilities": {
|
||||
"bounding": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE"
|
||||
],
|
||||
"effective": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE"
|
||||
],
|
||||
"inheritable": [
|
||||
],
|
||||
"permitted": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE"
|
||||
],
|
||||
"ambient": [
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE"
|
||||
]
|
||||
},
|
||||
"rlimits": [
|
||||
{
|
||||
"type": "RLIMIT_NOFILE",
|
||||
"hard": 1024,
|
||||
"soft": 1024
|
||||
}
|
||||
],
|
||||
"noNewPrivileges": true
|
||||
},
|
||||
"root": {
|
||||
"path": "rootfs",
|
||||
"readonly": true
|
||||
},
|
||||
"hostname": "crun",
|
||||
"mounts": [
|
||||
{
|
||||
"destination": "/proc",
|
||||
"type": "proc",
|
||||
"source": "proc"
|
||||
},
|
||||
{
|
||||
"destination": "/dev",
|
||||
"type": "tmpfs",
|
||||
"source": "tmpfs",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"strictatime",
|
||||
"mode=755",
|
||||
"size=65536k"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/dev/pts",
|
||||
"type": "devpts",
|
||||
"source": "devpts",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"newinstance",
|
||||
"ptmxmode=0666",
|
||||
"mode=0620",
|
||||
"gid=5"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/dev/shm",
|
||||
"type": "tmpfs",
|
||||
"source": "shm",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev",
|
||||
"mode=1777",
|
||||
"size=65536k"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/dev/mqueue",
|
||||
"type": "mqueue",
|
||||
"source": "mqueue",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/sys",
|
||||
"type": "sysfs",
|
||||
"source": "sysfs",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev",
|
||||
"ro"
|
||||
]
|
||||
},
|
||||
{
|
||||
"destination": "/sys/fs/cgroup",
|
||||
"type": "cgroup",
|
||||
"source": "cgroup",
|
||||
"options": [
|
||||
"nosuid",
|
||||
"noexec",
|
||||
"nodev",
|
||||
"relatime",
|
||||
"ro"
|
||||
]
|
||||
}
|
||||
],
|
||||
"linux": {
|
||||
"resources": {
|
||||
"devices": [
|
||||
{
|
||||
"allow": false,
|
||||
"access": "rwm"
|
||||
}
|
||||
]
|
||||
},
|
||||
"namespaces": [
|
||||
{
|
||||
"type": "pid"
|
||||
},
|
||||
{
|
||||
"type": "network"
|
||||
},
|
||||
{
|
||||
"type": "ipc"
|
||||
},
|
||||
{
|
||||
"type": "uts"
|
||||
},
|
||||
{
|
||||
"type": "cgroup"
|
||||
},
|
||||
{
|
||||
"type": "mount"
|
||||
}
|
||||
],
|
||||
"maskedPaths": [
|
||||
"/proc/acpi",
|
||||
"/proc/asound",
|
||||
"/proc/kcore",
|
||||
"/proc/keys",
|
||||
"/proc/latency_stats",
|
||||
"/proc/timer_list",
|
||||
"/proc/timer_stats",
|
||||
"/proc/sched_debug",
|
||||
"/sys/firmware",
|
||||
"/proc/scsi"
|
||||
],
|
||||
"readonlyPaths": [
|
||||
"/proc/bus",
|
||||
"/proc/fs",
|
||||
"/proc/irq",
|
||||
"/proc/sys",
|
||||
"/proc/sysrq-trigger"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
summary: Sanity test for crun
|
||||
test: bash ./runtest.sh
|
||||
duration: 10m
|
||||
tag: [ sanity ]
|
||||
|
|
@ -1,113 +0,0 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
set -exo pipefail
|
||||
|
||||
TEMPDIR=$(mktemp -d)
|
||||
TESTIMG="quay.io/libpod/busybox"
|
||||
CNAME="mycont-$RANDOM"
|
||||
|
||||
cat /etc/redhat-release
|
||||
uname -r
|
||||
rpm -q crun criu
|
||||
|
||||
if ! crun --version; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun features; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun list; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# create the top most bundle and rootfs directory
|
||||
mkdir -p "$TEMPDIR"/rootfs
|
||||
|
||||
# export busybox via podman into the rootfs directory
|
||||
if ! (podman export "$(podman create $TESTIMG)" | tar -C "$TEMPDIR"/rootfs -xvf -); then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# use existing spec
|
||||
cp ./config.json "$TEMPDIR"
|
||||
ls "$TEMPDIR"
|
||||
cd "$TEMPDIR"
|
||||
|
||||
if ! crun create $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun list; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun start $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun list; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun state $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun ps $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! ret=$(crun exec $CNAME pwd) || [[ "$ret" != '/' ]]; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun pause $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun state $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun resume $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun state $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! ret=$(crun exec $CNAME pwd) || [[ "$ret" != '/' ]]; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun delete --force $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun list; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! (crun run $CNAME &); then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun list; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# make sure the container is running state
|
||||
sleep 2
|
||||
|
||||
if ! ret=$(crun exec $CNAME echo 'ok') || [[ "$ret" != 'ok' ]]; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! crun kill $CNAME; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
exit 0
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
summary: Shellcheck tests
|
||||
test: find ../ -type f -name "*.sh" -exec shellcheck {} +
|
||||
duration: 10m
|
||||
tag: [ shellcheck ]
|
||||
Loading…
Add table
Add a link
Reference in a new issue