burble/nomad-driver-containerd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add comments.

Browse Source
This commit is contained in:
Shishir Mahajan 2020-06-30 16:35:10 -07:00
parent f6fc267328
commit a0277bf288
No known key found for this signature in database
GPG Key ID: D41782E7688DEC4A
3 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
example/privileged.nomad
View File

@ -9,7 +9,7 @@ job "privileged" {
image = "docker.io/library/ubuntu:16.04" image = "docker.io/library/ubuntu:16.04"
command = "sleep" command = "sleep"
args = ["600s"] args = ["600s"]
privileged = true privileged = true
devices = [ devices = [
"/dev/loop0", "/dev/loop0",
"/dev/loop1" "/dev/loop1"

1
tests/003-test-capabilities.sh
View File

@ -1,5 +1,6 @@
#!/bin/bash #!/bin/bash
# readonly_rootfs, cap_add and cap_drop flags are tested as part of this test.
test_capabilities_nomad_job() { test_capabilities_nomad_job() {
pushd ~/go/src/github.com/Roblox/nomad-driver-containerd/example pushd ~/go/src/github.com/Roblox/nomad-driver-containerd/example

2
tests/004-test-privileged.sh
View File

@ -1,5 +1,6 @@
#!/bin/bash #!/bin/bash
# privileged mode, devices and mounts are tested as part of this test.
test_privileged_nomad_job() { test_privileged_nomad_job() {
pushd ~/go/src/github.com/Roblox/nomad-driver-containerd/example pushd ~/go/src/github.com/Roblox/nomad-driver-containerd/example
@ -29,6 +30,7 @@ test_privileged_nomad_job() {
fi fi
# Check if container is running in privileged mode. # Check if container is running in privileged mode.
echo "INFO: Checking if container is running in privileged mode."
expected_capabilities="37" expected_capabilities="37"
actual_capabilities=$(nomad alloc exec -job privileged capsh --print|grep -i bounding|cut -d '=' -f 2|awk '{split($0,a,","); print a[length(a)]}') actual_capabilities=$(nomad alloc exec -job privileged capsh --print|grep -i bounding|cut -d '=' -f 2|awk '{split($0,a,","); print a[length(a)]}')
if [ "$expected_capabilities" != "$actual_capabilities" ]; then if [ "$expected_capabilities" != "$actual_capabilities" ]; then