Merge pull request #33695 from DaanDeMeyer/epel
mkosi: Add CI for CentOS Stream 10
This commit is contained in:
@@ -179,6 +179,10 @@ elif [[ $1 == initgroups ]]; then
|
||||
fi
|
||||
EOF
|
||||
chmod +x "$root/bin/getent"
|
||||
# The useradd is important here so the user is added to /etc/passwd. If the user is not in /etc/passwd,
|
||||
# bash will end up loading libnss_systemd.so which breaks when libnss_systemd.so is built with sanitizers
|
||||
# as bash isn't invoked with the necessary environment variables for that.
|
||||
useradd --root="$root" --uid 1000 --user-group --create-home testuser
|
||||
systemd-nspawn --directory="$root" bash -xec '[[ $USER == root ]]'
|
||||
systemd-nspawn --directory="$root" --user=testuser bash -xec '[[ $USER == testuser ]]'
|
||||
|
||||
@@ -672,8 +676,10 @@ fi
|
||||
EOF
|
||||
chmod +x "$root/bin/getent"
|
||||
|
||||
mkdir -p "$root/home/testuser"
|
||||
chown 1010:1010 "$root/home/testuser"
|
||||
# The useradd is important here so the user is added to /etc/passwd. If the user is not in /etc/passwd,
|
||||
# bash will end up loading libnss_systemd.so which breaks when libnss_systemd.so is built with sanitizers
|
||||
# as bash isn't invoked with the necessary environment variables for that.
|
||||
useradd --root="$root" --uid 1010 --user-group --create-home testuser
|
||||
|
||||
cmd='PERMISSIONS=$(stat -c "%u:%g" /home/testuser/file); if [[ $PERMISSIONS != "1010:1010" ]]; then echo "*** wrong permissions: $PERMISSIONS"; return 1; fi; touch /home/testuser/other_file'
|
||||
if ! SYSTEMD_LOG_TARGET=console \
|
||||
|
||||
@@ -355,15 +355,16 @@ portablectl "${ARGS[@]}" attach --copy=symlink --now --runtime /tmp/rootdir mini
|
||||
portablectl detach --now --runtime --enable /tmp/rootdir minimal-app0
|
||||
|
||||
# The wrong file should be ignored, given the right one has the xattr set
|
||||
mkdir -p /tmp/wrongext/usr/lib/extension-release.d /tmp/wrongext/usr/lib/systemd/system/
|
||||
echo "[Service]" > /tmp/wrongext/usr/lib/systemd/system/app0.service
|
||||
touch /tmp/wrongext/usr/lib/extension-release.d/extension-release.wrongext_somethingwrong.txt
|
||||
cp /tmp/rootdir/usr/lib/os-release /tmp/wrongext/usr/lib/extension-release.d/extension-release.app0
|
||||
setfattr -n user.extension-release.strict -v "false" /tmp/wrongext/usr/lib/extension-release.d/extension-release.app0
|
||||
portablectl "${ARGS[@]}" attach --runtime --extension /tmp/wrongext /tmp/rootdir app0
|
||||
trap 'rm -rf /var/cache/wrongext' EXIT
|
||||
mkdir -p /var/cache/wrongext/usr/lib/extension-release.d /var/cache/wrongext/usr/lib/systemd/system/
|
||||
echo "[Service]" > /var/cache/wrongext/usr/lib/systemd/system/app0.service
|
||||
touch /var/cache/wrongext/usr/lib/extension-release.d/extension-release.wrongext_somethingwrong.txt
|
||||
cp /tmp/rootdir/usr/lib/os-release /var/cache/wrongext/usr/lib/extension-release.d/extension-release.app0
|
||||
setfattr -n user.extension-release.strict -v "false" /var/cache/wrongext/usr/lib/extension-release.d/extension-release.app0
|
||||
portablectl "${ARGS[@]}" attach --runtime --extension /var/cache/wrongext /tmp/rootdir app0
|
||||
status="$(portablectl is-attached --extension wrongext rootdir)"
|
||||
[[ "${status}" == "attached-runtime" ]]
|
||||
portablectl detach --runtime --extension /tmp/wrongext /tmp/rootdir app0
|
||||
portablectl detach --runtime --extension /var/cache/wrongext /tmp/rootdir app0
|
||||
|
||||
umount /tmp/rootdir
|
||||
umount /tmp/app0
|
||||
|
||||
Reference in New Issue
Block a user