podman/test/system
Daniel J Walsh 83b0fb4696
Fix permission on secrets directory
This directory needs to be world searchable so users can access it from
different user namespaces.

Fixes: https://github.com/containers/podman/issues/12779

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-01-11 16:19:50 -05:00
..
000-TEMPLATE BATS: new tests, and improvements to existing ones 2019-03-18 15:21:52 -06:00
001-basic.bats Add podman rm --depend 2022-01-11 14:33:54 -05:00
005-info.bats System tests: tighten 'is' operator 2021-09-30 13:32:51 -06:00
010-images.bats System tests: fix RHEL8 gating tests 2022-01-10 12:14:53 -07:00
011-image.bats --authfile command line argument for image sign command. 2021-11-11 15:11:19 -05:00
015-help.bats Merge pull request #11953 from markusthoemmes/help-default 2021-11-08 18:23:17 +01:00
020-tag.bats migrate Podman to containers/common/libimage 2021-05-05 11:30:12 +02:00
030-run.bats Emergency system-test fixes 2022-01-06 15:54:01 -07:00
035-logs.bats System tests: fix RHEL8 gating tests 2022-01-10 12:14:53 -07:00
037-runlabel.bats Fix handling of $NAME and $IMAGE in runlabel 2021-04-12 08:41:08 -04:00
040-ps.bats Show --external containers even without --all option 2021-12-14 16:03:21 -05:00
045-start.bats System tests: confirm that -a and -l clash 2021-10-20 11:09:32 -06:00
050-stop.bats Warn if podman stop timeout expires that sigkill was sent 2021-10-08 07:06:37 -04:00
055-rm.bats Add podman rm --depend 2022-01-11 14:33:54 -05:00
060-mount.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
065-cp.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
070-build.bats tests: adjust old build test to expect exit code 2021-12-17 16:20:03 +05:30
075-exec.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
080-pause.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
090-events.bats Error logs --follow if events-backend != journald, event-logger=journald 2021-11-13 07:11:09 -05:00
110-history.bats Refactor podman image command output 2021-12-02 09:07:27 -07:00
120-load.bats Emergency system-test fixes 2022-01-06 15:54:01 -07:00
125-import.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
130-kill.bats kill: fix output 2021-12-16 13:04:58 +01:00
140-diff.bats Gating tests: diff test: workaround for RHEL8 failure 2021-02-02 15:23:48 -07:00
150-login.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
160-volumes.bats Set volume NeedsCopyUp to false iff data was copied up 2022-01-06 10:42:34 -05:00
170-run-userns.bats Fix permission on secrets directory 2022-01-11 16:19:50 -05:00
180-blkio.bats Change Tests to ignore missing containers when removing --all 2022-01-05 10:46:53 -05:00
200-pod.bats Use the InfraImage defined in containers.conf 2022-01-10 16:13:33 -05:00
220-healthcheck.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
250-systemd.bats generate systemd: support entrypoint JSON strings 2021-12-08 15:51:23 +01:00
255-auto-update.bats systemd: replace multi-user with default.target 2021-11-30 14:37:25 +01:00
260-sdnotify.bats sdnotify test: accept MAINPID anywhere 2021-09-30 12:09:48 -06:00
270-socket-activation.bats system tests: socket activation: clean up 2021-10-18 08:47:15 -06:00
271-tcp-cors-server.bats Enable /debug/pprof API service endpoints 2021-10-08 13:57:20 -07:00
272-system-connection.bats Print headers for system connection ls 2021-11-10 14:48:08 -05:00
300-cli-parsing.bats Handle podman-remote run --rm 2020-08-04 20:26:34 -04:00
320-system-df.bats fix podman system df format error 2020-07-31 01:40:42 +08:00
330-corrupt-images.bats System tests: tighten 'is' operator 2021-09-30 13:32:51 -06:00
400-unprivileged-access.bats Semiperiodic cleanup of obsolete Skip()s 2021-11-19 08:49:57 -07:00
410-selinux.bats We should only be relabeling when on first run 2021-10-15 14:27:14 -04:00
420-cgroups.bats test: use new helper 2021-09-30 13:59:46 +02:00
450-interactive.bats Add --time out for podman * rm -f commands 2021-10-04 07:07:56 -04:00
500-networking.bats Use hosts public ip address in rootless containers 2021-12-21 08:50:40 -05:00
520-checkpoint.bats podman image scp never enter podman user NS 2021-12-23 10:10:51 -05:00
600-completion.bats tests: clean up FIXMEs and noise 2021-12-06 08:30:59 -07:00
700-play.bats play kube add support for multiple networks 2021-12-14 15:23:40 +01:00
build-testimage System tests: the continuing multiarch saga 2021-06-10 13:33:20 -06:00
helpers.bash Merge pull request #12687 from rhatdan/volume 2022-01-06 15:16:13 +01:00
helpers.systemd.bash system tests: cleaner, safer use of systemd 2021-07-20 08:57:26 -06:00
helpers.t system tests: new random_free_port helper 2021-09-08 11:25:42 -06:00
README.md implement 'make remotesystem' 2019-08-08 11:44:55 -06:00
TODO.md Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00

Quick overview of podman system tests. The idea is to use BATS, but with a framework for making it easy to add new tests and to debug failures.

Quick Start

Look at 030-run.bats for a simple but packed example. This introduces the basic set of helper functions:

  • setup (implicit) - resets container storage so there's one and only one (standard) image, and no running containers.

  • parse_table - you can define tables of inputs and expected results, then read those in a while loop. This makes it easy to add new tests. Because bash is not a programming language, the caller of parse_table sometimes needs to massage the returned values; 015-run.bats offers examples of how to deal with the more typical such issues.

  • run_podman - runs command defined in $PODMAN (default: 'podman' but could also be './bin/podman' or 'podman-remote'), with a timeout. Checks its exit status.

  • is - compare actual vs expected output. Emits a useful diagnostic on failure.

  • die - output a properly-formatted message to stderr, and fail test

  • skip_if_rootless - if rootless, skip this test with a helpful message.

  • skip_if_remote - like the above, but skip if testing podman-remote

  • random_string - returns a pseudorandom alphanumeric string

Test files are of the form NNN-name.bats where NNN is a three-digit number. Please preserve this convention, it simplifies viewing the directory and understanding test order. In particular, 00x tests should be reserved for a first-pass fail-fast subset of tests:

bats test/system/00*.bats || exit 1
bats test/system

...the goal being to provide quick feedback on catastrophic failures without having to wait for the entire test suite.

Running tests

To run the tests locally in your sandbox, you can use one of these methods:

  • make;PODMAN=./bin/podman bats ./test/system/070-build.bats # runs just the specified test
  • make;PODMAN=./bin/podman bats ./test/system # runs all

To test as root:

  • $ PODMAN=./bin/podman sudo --preserve-env=PODMAN bats test/system

Analyzing test failures

The top priority for this scheme is to make it easy to diagnose what went wrong. To that end, podman_run always logs all invoked commands, their output and exit codes. In a normal run you will never see this, but BATS will display it on failure. The goal here is to give you everything you need to diagnose without having to rerun tests.

The is comparison function is designed to emit useful diagnostics, in particular, the actual and expected strings. Please do not use the horrible BATS standard of [ x = y ]; that's nearly useless for tracking down failures.

If the above are not enough to help you track down a failure:

Debugging tests

Some functions have dprint statements. To see the output of these, set PODMAN_TEST_DEBUG="funcname" where funcname is the name of the function or perhaps just a substring.

Requirements

The jq tool is needed for parsing JSON output.

Further Details

TBD. For now, look in helpers.bash; each helper function has (what are intended to be) helpful header comments. For even more examples, see and/or run helpers.t; that's a regression test and provides a thorough set of examples of how the helpers work.