diff options
author | Daiderd Jordan <daiderd@gmail.com> | 2018-04-14 13:41:23 +0200 |
---|---|---|
committer | Daiderd Jordan <daiderd@gmail.com> | 2018-04-14 14:11:14 +0200 |
commit | d538fc06e2be5a0e02d8c84b88442c44bb726bb6 (patch) | |
tree | 0255be9098696c003e80f42bc528687deca59c03 /nixos/tests/docker-tools-overlay.nix | |
parent | 2a0934239599f3127d1dbf9f063b3906a8e9ef6f (diff) |
docker-tools: add a test for permissions issues with AUFS/overlay
docker# [ 11.054736] d24d6cdd57c9[763]: /bin/bash: error while loading shared libraries: libreadline.so.7: cannot open shared object file: Permission denied docker# /bin/bash: error while loading shared libraries: libreadline.so.7: cannot open shared object file: Permission denied docker: exit status 127 docker: output: error: command `docker run --rm -u 1000:1000 bash /bin/bash --version' did not succeed (exit code 127) command `docker run --rm -u 1000:1000 bash /bin/bash --version' did not succeed (exit code 127)
Diffstat (limited to 'nixos/tests/docker-tools-overlay.nix')
-rw-r--r-- | nixos/tests/docker-tools-overlay.nix | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/nixos/tests/docker-tools-overlay.nix b/nixos/tests/docker-tools-overlay.nix new file mode 100644 index 0000000000000..9d7fa3e7a8c52 --- /dev/null +++ b/nixos/tests/docker-tools-overlay.nix @@ -0,0 +1,32 @@ +# this test creates a simple GNU image with docker tools and sees if it executes + +import ./make-test.nix ({ pkgs, ... }: +{ + name = "docker-tools-overlay"; + meta = with pkgs.stdenv.lib.maintainers; { + maintainers = [ lnl7 ]; + }; + + nodes = { + docker = + { config, pkgs, ... }: + { + virtualisation.docker.enable = true; + virtualisation.docker.storageDriver = "overlay"; # defaults to overlay2 + }; + }; + + testScript = + '' + $docker->waitForUnit("sockets.target"); + + $docker->succeed("docker load --input='${pkgs.dockerTools.examples.bash}'"); + $docker->succeed("docker run --rm ${pkgs.dockerTools.examples.bash.imageName} bash --version"); + + # Check if the nix store has correct user permissions depending on what + # storage driver is used, incorrectly built images can show up as readonly. + # drw------- 3 0 0 3 Apr 14 11:36 /nix + # drw------- 99 0 0 100 Apr 14 11:36 /nix/store + $docker->succeed("docker run --rm -u 1000:1000 ${pkgs.dockerTools.examples.bash.imageName} bash --version"); + ''; +}) |