lxc-test-unpriv revision d08363afbb40a7a8f579fe1ce60e40ffeaee5959
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# lxc: linux Container library
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# Serge Hallyn <serge.hallyn@ubuntu.com>
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# This is a test script for unprivileged containers
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# This library is free software; you can redistribute it and/or
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# modify it under the terms of the GNU Lesser General Public
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# License as published by the Free Software Foundation; either
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# version 2.1 of the License, or (at your option) any later version.
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# This library is distributed in the hope that it will be useful,
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# but WITHOUT ANY WARRANTY; without even the implied warranty of
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# Lesser General Public License for more details.
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# You should have received a copy of the GNU Lesser General Public
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# License along with this library; if not, write to the Free Software
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
061ba5d071e4c2b4bfe76c84875bc29cc5334c27Stéphane Graber echo 'run as root'
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallynwhich newuidmap >/dev/null 2>&1 || { echo "'newuidmap' command is missing" >&2; exit 1; }
3a5495cf2f6c1806f5a91d699448b15b510f146ePo-Hsu Lin sed -i '/usernic-user/d' /var/run/lxc/nics /etc/lxc/lxc-usernet
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn sed -i '/^lxcunpriv:/d' /etc/subuid /etc/subgid
3ad30ff74fcf8c00389c114ecc265be7b6764048Serge Hallyn if [ $DONE -eq 0 ]; then
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn# create a test user
73d3e0903c728d5fdc4591c5d7cd157004461230Stéphane Graberecho "$TUSER veth lxcbr0 2" > /etc/lxc/lxc-usernet
73d3e0903c728d5fdc4591c5d7cd157004461230Stéphane Grabersed -i '/^lxcunpriv:/d' /etc/subuid /etc/subgid
73d3e0903c728d5fdc4591c5d7cd157004461230Stéphane Graberusermod -v 910000-919999 -w 910000-919999 $TUSER
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallynexport HOME=$HDIR
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallynexport USER=$TUSER
fd2b7320e3562450111b5adaabcb7f6b9c8d9d13Stéphane Graberlxc.network.type = veth
fd2b7320e3562450111b5adaabcb7f6b9c8d9d13Stéphane Graberlxc.network.link = lxcbr0
fd2b7320e3562450111b5adaabcb7f6b9c8d9d13Stéphane Graberlxc.id_map = u 0 910000 9999
fd2b7320e3562450111b5adaabcb7f6b9c8d9d13Stéphane Graberlxc.id_map = g 0 910000 9999
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn#export HOME=$HDIR
73d3e0903c728d5fdc4591c5d7cd157004461230Stéphane Graberenv | awk -F= '{print $1}' | while read line; do export ${line}=; done
73d3e0903c728d5fdc4591c5d7cd157004461230Stéphane Graberecho "DOING: lxc-create -P $HDIR/lxcbase -t ubuntu-cloud -n c1 -f $HDIR/lxc-usernic.conf"
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallynsudo --set-home -u $TUSER lxc-create -P $HDIR/lxcbase -t ubuntu-cloud -n c1 -f $HDIR/lxc-usernic.conf -l outout -o /tmp/o1
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallyn#read -p "c1 created, check it now" x
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallynsudo --set-home -u $TUSER lxc-start -P $HDIR/lxcbase -n c1 -d
d08363afbb40a7a8f579fe1ce60e40ffeaee5959Serge Hallynp1=`lxc-info -P $HDIR/lxcbase -n c1 -p | awk -F: '{ print $2 }'`
79d88b03ed31a729bc0f4a0f8a8be506d25fd470Serge Hallyn[ "$p1" != "-1" ] || { echo "Failed to start container c1"; false; }
73d3e0903c728d5fdc4591c5d7cd157004461230Stéphane Graberlxc-attach -P $HDIR/lxcbase -n c1 -- ping -c 1 google.com
79d88b03ed31a729bc0f4a0f8a8be506d25fd470Serge Hallynecho "All tests passed"