mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-26 23:52:33 +00:00
5733967290
This is required by (among others) Podman to run containers in rootless mode. Other distributions such as Fedora and Ubuntu already set up these mappings. The scheme with a start UID/GID offset starting at 100000 and increasing in 65536 increments is copied from Fedora.
80 lines
2.7 KiB
Nix
80 lines
2.7 KiB
Nix
# This test runs podman and checks if simple container starts
|
|
|
|
import ./make-test-python.nix (
|
|
{ pkgs, lib, ... }: {
|
|
name = "podman";
|
|
meta = {
|
|
maintainers = lib.teams.podman.members;
|
|
};
|
|
|
|
nodes = {
|
|
podman =
|
|
{ pkgs, ... }:
|
|
{
|
|
virtualisation.podman.enable = true;
|
|
|
|
users.users.alice = {
|
|
isNormalUser = true;
|
|
home = "/home/alice";
|
|
description = "Alice Foobar";
|
|
};
|
|
|
|
};
|
|
};
|
|
|
|
testScript = ''
|
|
import shlex
|
|
|
|
|
|
def su_cmd(cmd):
|
|
cmd = shlex.quote(cmd)
|
|
return f"su alice -l -c {cmd}"
|
|
|
|
|
|
podman.wait_for_unit("sockets.target")
|
|
start_all()
|
|
|
|
|
|
with subtest("Run container as root with runc"):
|
|
podman.succeed("tar cv --files-from /dev/null | podman import - scratchimg")
|
|
podman.succeed(
|
|
"podman run --runtime=runc -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"
|
|
)
|
|
podman.succeed("podman ps | grep sleeping")
|
|
podman.succeed("podman stop sleeping")
|
|
podman.succeed("podman rm sleeping")
|
|
|
|
with subtest("Run container as root with crun"):
|
|
podman.succeed("tar cv --files-from /dev/null | podman import - scratchimg")
|
|
podman.succeed(
|
|
"podman run --runtime=crun -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"
|
|
)
|
|
podman.succeed("podman ps | grep sleeping")
|
|
podman.succeed("podman stop sleeping")
|
|
podman.succeed("podman rm sleeping")
|
|
|
|
with subtest("Run container rootless with runc"):
|
|
podman.succeed(su_cmd("tar cv --files-from /dev/null | podman import - scratchimg"))
|
|
podman.succeed(
|
|
su_cmd(
|
|
"podman run --runtime=runc -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"
|
|
)
|
|
)
|
|
podman.succeed(su_cmd("podman ps | grep sleeping"))
|
|
podman.succeed(su_cmd("podman stop sleeping"))
|
|
podman.succeed(su_cmd("podman rm sleeping"))
|
|
|
|
with subtest("Run container rootless with crun"):
|
|
podman.succeed(su_cmd("tar cv --files-from /dev/null | podman import - scratchimg"))
|
|
podman.succeed(
|
|
su_cmd(
|
|
"podman run --cgroup-manager=cgroupfs --runtime=crun -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"
|
|
)
|
|
)
|
|
podman.succeed(su_cmd("podman ps | grep sleeping"))
|
|
podman.succeed(su_cmd("podman stop sleeping"))
|
|
podman.succeed(su_cmd("podman rm sleeping"))
|
|
'';
|
|
}
|
|
)
|