ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2024-12-24 21:38:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

build: syscalls: Add setns.

Browse source 
* guix/build/syscalls.scm (setns): New procedure.
* tests/syscalls.scm ("setns"): New test.

squash: setns
This commit is contained in:
David Thompson 2015-06-08 08:43:05 -04:00 committed by David Thompson
parent 8950ed11c6
commit 43ace6ea76
2 changed files with 42 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
guix/build/syscalls.scm
View file

@ -54,6 +54,7 @@ (define-module (guix build syscalls)
CLONE_NEWPID CLONE_NEWPID
CLONE_NEWNET CLONE_NEWNET
clone clone
setns
IFF_UP IFF_UP
IFF_BROADCAST IFF_BROADCAST
@ -313,6 +314,21 @@ (define clone
are shared between the parent and child processes." are shared between the parent and child processes."
(proc syscall-id flags %null-pointer)))) (proc syscall-id flags %null-pointer))))
(define setns
(let* ((ptr (dynamic-func "setns" (dynamic-link)))
(proc (pointer->procedure int ptr (list int int))))
(lambda (fdes nstype)
"Reassociate the current process with the namespace specified by FDES, a
file descriptor obtained by opening a /proc/PID/ns/* file. NSTYPE specifies
which type of namespace the current process may be reassociated with, or 0 if
there is no such limitation."
(let ((ret (proc fdes nstype))
(err (errno)))
(unless (zero? ret)
(throw 'system-error "setns" "~d ~d: ~A"
(list fdes nstype (strerror err))
(list err)))))))
;;; ;;;
;;; Packed structures. ;;; Packed structures.

26
tests/syscalls.scm
View file

@ -90,6 +90,32 @@ (define (user-namespace pid)
((_ . status) ((_ . status)
(= 42 (status:exit-val status)))))))) (= 42 (status:exit-val status))))))))
(test-assert "setns"
(match (clone (logior CLONE_NEWUSER SIGCHLD))
(0 (primitive-exit 0))
(clone-pid
(match (pipe)
((in . out)
(match (primitive-fork)
(0
(close in)
;; Join the user namespace.
(call-with-input-file (user-namespace clone-pid)
(lambda (port)
(setns (port->fdes port) 0)))
(write 'done out)
(close out)
(primitive-exit 0))
(fork-pid
(close out)
;; Wait for the child process to join the namespace.
(read in)
(let ((result (and (equal? (readlink (user-namespace clone-pid))
(readlink (user-namespace fork-pid))))))
;; Clean up.
(waitpid clone-pid)
(waitpid fork-pid)
result))))))))
(test-assert "all-network-interfaces" (test-assert "all-network-interfaces"
(match (all-network-interfaces) (match (all-network-interfaces)