mirror of
https://git.in.rschanz.org/ryan77627/guix.git
synced 2024-11-08 16:06:16 -05:00
1ccc0f807d
* guix/scripts/environment.scm (launch-environment/container): Add UID and GID. Use them in PASSWD and GROUPS. Pass them as #:guest-uid and #:guest-gid to 'call-with-container'. * tests/guix-environment-container.sh: Test the inner UID. In '--user' test, replace hard-coded 0 with 1000. * doc/guix.texi (Invoking guix environment): Adjust accordingly.
160 lines
5.2 KiB
Bash
160 lines
5.2 KiB
Bash
# GNU Guix --- Functional package management for GNU
|
|
# Copyright © 2015 David Thompson <davet@gnu.org>
|
|
#
|
|
# This file is part of GNU Guix.
|
|
#
|
|
# GNU Guix is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or (at
|
|
# your option) any later version.
|
|
#
|
|
# GNU Guix is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
#
|
|
# Test 'guix environment'.
|
|
#
|
|
|
|
set -e
|
|
|
|
guix environment --version
|
|
|
|
if ! guile -c '((@@ (guix scripts environment) assert-container-features))'
|
|
then
|
|
# User containers are not supported; skip this test.
|
|
exit 77
|
|
fi
|
|
|
|
tmpdir="t-guix-environment-$$"
|
|
trap 'rm -r "$tmpdir"' EXIT
|
|
|
|
mkdir "$tmpdir"
|
|
|
|
# Make sure the exit value is preserved.
|
|
if guix environment --container --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(exit 42)'
|
|
then
|
|
false
|
|
else
|
|
test $? = 42
|
|
fi
|
|
|
|
# By default, the UID inside the container should be the same as outside.
|
|
uid="`id -u`"
|
|
inner_uid="`guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(display (getuid))'`"
|
|
test $inner_uid = $uid
|
|
|
|
# When '--user' is passed, the UID should be 1000. (Note: Use a separate HOME
|
|
# so that we don't run into problems when the test directory is under /home.)
|
|
export tmpdir
|
|
inner_uid="`HOME=$tmpdir guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
--user=gnu-guix -- guile -c '(display (getuid))'`"
|
|
test $inner_uid = 1000
|
|
|
|
if test "x$USER" = "x"; then USER="`id -un`"; fi
|
|
|
|
# Check whether /etc/passwd and /etc/group are valid.
|
|
guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c "(exit (string=? \"$USER\" (passwd:name (getpwuid (getuid)))))"
|
|
guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(exit (string? (group:name (getgrgid (getgid)))))'
|
|
guix environment -C --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c '(use-modules (srfi srfi-1))
|
|
(exit (every group:name
|
|
(map getgrgid (vector->list (getgroups)))))'
|
|
|
|
# Make sure file-not-found errors in mounts are reported.
|
|
if guix environment --container --ad-hoc --bootstrap guile-bootstrap \
|
|
--expose=/does-not-exist -- guile -c 1 2> "$tmpdir/error"
|
|
then
|
|
false
|
|
else
|
|
grep "/does-not-exist" "$tmpdir/error"
|
|
grep "[Nn]o such file" "$tmpdir/error"
|
|
fi
|
|
|
|
# Make sure that the right directories are mapped.
|
|
mount_test_code="
|
|
(use-modules (ice-9 rdelim)
|
|
(ice-9 match)
|
|
(srfi srfi-1))
|
|
|
|
(define mappings
|
|
(filter-map (lambda (line)
|
|
(match (string-split line #\space)
|
|
;; Empty line.
|
|
((\"\") #f)
|
|
;; Ignore the root file system.
|
|
((_ \"/\" _ _ _ _)
|
|
#f)
|
|
;; Ignore these types of file systems, except if they
|
|
;; correspond to a parent file system.
|
|
((_ mount (or \"tmpfs\" \"proc\" \"sysfs\" \"devtmpfs\"
|
|
\"devpts\" \"cgroup\" \"mqueue\") _ _ _)
|
|
(and (string-prefix? (getcwd) mount)
|
|
mount))
|
|
((_ mount _ _ _ _)
|
|
mount)))
|
|
(string-split (call-with-input-file \"/proc/mounts\" read-string)
|
|
#\newline)))
|
|
|
|
(for-each (lambda (mount)
|
|
(display mount)
|
|
(newline))
|
|
mappings)"
|
|
|
|
guix environment --container --ad-hoc --bootstrap guile-bootstrap \
|
|
-- guile -c "$mount_test_code" > $tmpdir/mounts
|
|
|
|
cat "$tmpdir/mounts"
|
|
test `wc -l < $tmpdir/mounts` -eq 4
|
|
|
|
current_dir="`cd $PWD; pwd -P`"
|
|
grep -e "$current_dir$" $tmpdir/mounts # current directory
|
|
grep $(guix build guile-bootstrap) $tmpdir/mounts
|
|
grep -e "$NIX_STORE_DIR/.*-bash" $tmpdir/mounts # bootstrap bash
|
|
|
|
rm $tmpdir/mounts
|
|
|
|
# Make sure 'GUIX_ENVIRONMENT' is linked to '~/.guix-profile' when requested
|
|
# within a container.
|
|
(
|
|
linktest='(exit (string=? (getenv "GUIX_ENVIRONMENT")
|
|
(readlink (string-append (getenv "HOME") "/.guix-profile"))))'
|
|
|
|
cd "$tmpdir" \
|
|
&& guix environment --bootstrap --container --link-profile \
|
|
--ad-hoc guile-bootstrap --pure \
|
|
-- guile -c "$linktest"
|
|
)
|
|
|
|
# Test that user can be mocked.
|
|
usertest='(exit (and (string=? (getenv "HOME") "/home/foognu")
|
|
(string=? (passwd:name (getpwuid 1000)) "foognu")
|
|
(file-exists? "/home/foognu/umock")))'
|
|
touch "$tmpdir/umock"
|
|
HOME="$tmpdir" guix environment --bootstrap --container --user=foognu \
|
|
--ad-hoc guile-bootstrap --pure \
|
|
--share="$tmpdir/umock" \
|
|
-- guile -c "$usertest"
|
|
|
|
|
|
# Check the exit code.
|
|
|
|
abnormal_exit_code="
|
|
(use-modules (system foreign))
|
|
;; Purposely make Guile crash with a segfault. :)
|
|
(pointer->string (make-pointer 123) 123)"
|
|
|
|
if guix environment --bootstrap --container \
|
|
--ad-hoc guile-bootstrap -- guile -c "$abnormal_exit_code"
|
|
then false;
|
|
else
|
|
test $? -gt 127
|
|
fi
|