linuxkit/src/moby/config_test.go

package moby

import (
	"encoding/json"
	"reflect"
	"testing"

	"github.com/docker/docker/api/types"
	"github.com/docker/docker/api/types/container"
)

func setupInspect(t *testing.T, label Image) types.ImageInspect {
	var inspect types.ImageInspect
	var config container.Config

	labelJSON, err := json.Marshal(label)
	if err != nil {
		t.Error(err)
	}
	config.Labels = map[string]string{"org.mobyproject.config": string(labelJSON)}

	inspect.Config = &config

	return inspect
}

func TestOverrides(t *testing.T) {
	idMap := map[string]uint32{}

	var yamlCaps = []string{"CAP_SYS_ADMIN"}

	var yaml = Image{
		Name:         "test",
		Image:        "testimage",
		Capabilities: &yamlCaps,
	}

	var labelCaps = []string{"CAP_SYS_CHROOT"}

	var label = Image{
		Capabilities: &labelCaps,
		Cwd:          "/label/directory",
	}

	inspect := setupInspect(t, label)

	oci, err := ConfigInspectToOCI(yaml, inspect, idMap)
	if err != nil {
		t.Error(err)
	}

	if !reflect.DeepEqual(oci.Process.Capabilities.Bounding, yamlCaps) {
		t.Error("Expected yaml capabilities to override but got", oci.Process.Capabilities.Bounding)
	}
	if oci.Process.Cwd != label.Cwd {
		t.Error("Expected label Cwd to be applied, got", oci.Process.Cwd)
	}
}

func TestInvalidCap(t *testing.T) {
	idMap := map[string]uint32{}

	yaml := Image{
		Name:  "test",
		Image: "testimage",
	}

	labelCaps := []string{"NOT_A_CAP"}
	var label = Image{
		Capabilities: &labelCaps,
	}

	inspect := setupInspect(t, label)

	_, err := ConfigInspectToOCI(yaml, inspect, idMap)
	if err == nil {
		t.Error("expected error, got valid OCI config")
	}
}

func TestIdMap(t *testing.T) {
	idMap := map[string]uint32{"test": 199}

	var uid interface{} = "test"
	var gid interface{} = 76

	yaml := Image{
		Name:  "test",
		Image: "testimage",
		UID:   &uid,
		GID:   &gid,
	}

	var label = Image{}

	inspect := setupInspect(t, label)

	oci, err := ConfigInspectToOCI(yaml, inspect, idMap)
	if err != nil {
		t.Error(err)
	}

	if oci.Process.User.UID != 199 {
		t.Error("Expected named uid to work")
	}
	if oci.Process.User.GID != 76 {
		t.Error("Expected numerical gid to work")
	}
}