-
Notifications
You must be signed in to change notification settings - Fork 456
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support mount propagation validation #142
Conversation
@miaoyq Does cri-containerd pass this? |
@Random-Liu Yes, have passed. |
@miaoyq Cool! Will review it now. |
rc.RemovePodSandbox(podID) | ||
}) | ||
|
||
It("mount with 'rprivate' should not support propagation", func() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should also check mount inside container could not be propagated to host.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will do.
Expect(len(fileInfo)).NotTo(BeZero(), "len(fileInfo) should not be zero.") | ||
}) | ||
|
||
It("mount with 'rslave' should support propagation from host to container", func() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should also check mount inside container could not be propagated to host.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will do.
pkg/validate/container.go
Outdated
Expect(len(output)).NotTo(BeZero(), "len(output) should not be zero.") | ||
}) | ||
|
||
It("mount without propagation option should not support propagation", func() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is not defined in CRI, runtime may return an error for non-supported mount propagation option, so let's not test this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK, will remove this part.
Signed-off-by: Yanqiang Miao <[email protected]>
@Random-Liu Updated, cri-containerd have passed also. |
LGTM |
LGTM |
Part of #131.
/cc @feiskyer @Random-Liu
Signed-off-by: Yanqiang Miao [email protected]