mirror of
https://git.in.rschanz.org/ryan77627/guix.git
synced 2024-11-14 10:55:23 -05:00
5a02f8e384
* guix/scripts/environment.scm (launch-environment/container): Add #:white-list parameter and honor it. (guix-environment): Pass #:white-list to 'launch-environment/container'. * tests/guix-environment-container.sh: Add test.
172 lines
5.6 KiB
Bash
172 lines
5.6 KiB
Bash
# GNU Guix --- Functional package management for GNU
|
|
# Copyright © 2015 David Thompson <davet@gnu.org>
|
|
#
|
|
# This file is part of GNU Guix.
|
|
#
|
|
# GNU Guix is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or (at
|
|
# your option) any later version.
|
|
#
|
|
# GNU Guix is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
#
|
|
# Test 'guix environment'.
|
|
#
|
|
|
|
set -e
|
|
|
|
guix environment --version
|
|
|
|
if ! guile -c '((@@ (guix scripts environment) assert-container-features))'
|
|
then
|
|
# User containers are not supported; skip this test.
|
|
exit 77
|
|
fi
|
|
|
|
tmpdir="t-guix-environment-$$"
|
|
trap 'rm -r "$tmpdir"' EXIT
|
|
|
|
mkdir "$tmpdir"
|
|
|
|
# Make sure the exit value is preserved.
|
|
if guix environment --container --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(exit 42)'
|
|
then
|
|
false
|
|
else
|
|
test $? = 42
|
|
fi
|
|
|
|
# Make sure '--preserve' is honored.
|
|
result="`FOOBAR=42; export FOOBAR; guix environment -C --ad-hoc --bootstrap \
|
|
guile-bootstrap -E ^FOO -- guile -c '(display (getenv \"FOOBAR\"))'`"
|
|
test "$result" = "42"
|
|
|
|
# By default, the UID inside the container should be the same as outside.
|
|
uid="`id -u`"
|
|
inner_uid="`guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(display (getuid))'`"
|
|
test $inner_uid = $uid
|
|
|
|
# When '--user' is passed, the UID should be 1000. (Note: Use a separate HOME
|
|
# so that we don't run into problems when the test directory is under /home.)
|
|
export tmpdir
|
|
inner_uid="`HOME=$tmpdir guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
--user=gnu-guix -- guile -c '(display (getuid))'`"
|
|
test $inner_uid = 1000
|
|
|
|
if test "x$USER" = "x"; then USER="`id -un`"; fi
|
|
|
|
# Check whether /etc/passwd and /etc/group are valid.
|
|
guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c "(exit (string=? \"$USER\" (passwd:name (getpwuid (getuid)))))"
|
|
guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(exit (string? (group:name (getgrgid (getgid)))))'
|
|
guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(use-modules (srfi srfi-1))
|
|
(exit (every group:name
|
|
(map getgrgid (vector->list (getgroups)))))'
|
|
|
|
# Make sure file-not-found errors in mounts are reported.
|
|
if guix environment --container --ad-hoc --bootstrap guile-bootstrap \
|
|
--expose=/does-not-exist -- guile -c 1 2> "$tmpdir/error"
|
|
then
|
|
false
|
|
else
|
|
grep "/does-not-exist" "$tmpdir/error"
|
|
grep "[Nn]o such file" "$tmpdir/error"
|
|
fi
|
|
|
|
# Make sure that the right directories are mapped.
|
|
mount_test_code="
|
|
(use-modules (ice-9 rdelim)
|
|
(ice-9 match)
|
|
(srfi srfi-1))
|
|
|
|
(define mappings
|
|
(filter-map (lambda (line)
|
|
(match (string-split line #\space)
|
|
;; Empty line.
|
|
((\"\") #f)
|
|
;; Ignore the root file system.
|
|
((_ \"/\" _ _ _ _)
|
|
#f)
|
|
;; Ignore these types of file systems, except if they
|
|
;; correspond to a parent file system.
|
|
((_ mount (or \"tmpfs\" \"proc\" \"sysfs\" \"devtmpfs\"
|
|
\"devpts\" \"cgroup\" \"mqueue\") _ _ _)
|
|
(and (string-prefix? (getcwd) mount)
|
|
mount))
|
|
((_ mount _ _ _ _)
|
|
mount)))
|
|
(string-split (call-with-input-file \"/proc/mounts\" read-string)
|
|
#\newline)))
|
|
|
|
(for-each (lambda (mount)
|
|
(display mount)
|
|
(newline))
|
|
mappings)"
|
|
|
|
guix environment --container --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c "$mount_test_code" > $tmpdir/mounts
|
|
|
|
cat "$tmpdir/mounts"
|
|
test `wc -l < $tmpdir/mounts` -eq 4
|
|
|
|
current_dir="`cd $PWD; pwd -P`"
|
|
grep -e "$current_dir$" $tmpdir/mounts # current directory
|
|
grep $(guix build guile-bootstrap) $tmpdir/mounts
|
|
grep -e "$NIX_STORE_DIR/.*-bash" $tmpdir/mounts # bootstrap bash
|
|
|
|
rm $tmpdir/mounts
|
|
|
|
# Make sure 'GUIX_ENVIRONMENT' is linked to '~/.guix-profile' when requested
|
|
# within a container.
|
|
(
|
|
linktest='(exit (string=? (getenv "GUIX_ENVIRONMENT")
|
|
(readlink (string-append (getenv "HOME") "/.guix-profile"))))'
|
|
|
|
cd "$tmpdir" \
|
|
&& guix environment --bootstrap --container --link-profile \
|
|
--ad-hoc guile-bootstrap --pure \
|
|
-- guile -c "$linktest"
|
|
)
|
|
|
|
# Test that user can be mocked.
|
|
usertest='(exit (and (string=? (getenv "HOME") "/home/foognu")
|
|
(string=? (passwd:name (getpwuid 1000)) "foognu")
|
|
(file-exists? "/home/foognu/umock")))'
|
|
touch "$tmpdir/umock"
|
|
HOME="$tmpdir" guix environment --bootstrap --container --user=foognu \
|
|
--ad-hoc guile-bootstrap --pure \
|
|
--share="$tmpdir/umock" \
|
|
-- guile -c "$usertest"
|
|
|
|
# if not sharing CWD, chdir home
|
|
(
|
|
cd "$tmpdir" \
|
|
&& guix environment --bootstrap --container --no-cwd --user=foo \
|
|
--ad-hoc guile-bootstrap --pure \
|
|
-- /bin/sh -c 'test $(pwd) == "/home/foo" -a ! -d '"$tmpdir"
|
|
)
|
|
|
|
# Check the exit code.
|
|
|
|
abnormal_exit_code="
|
|
(use-modules (system foreign))
|
|
;; Purposely make Guile crash with a segfault. :)
|
|
(pointer->string (make-pointer 123) 123)"
|
|
|
|
if guix environment --bootstrap --container \
|
|
--ad-hoc guile-bootstrap -- guile -c "$abnormal_exit_code"
|
|
then false;
|
|
else
|
|
test $? -gt 127
|
|
fi
|