11 Commits

Author	SHA1	Message	Date
Luca Boccassi	1219bd4306	Add tests and documentation for all remaining sandboxing in user manager	2022-03-18 10:09:56 +01:00
Luca Boccassi	24759d8f08	core: support ExtensionDirectories in user manager ... Unprivileged overlayfs is supported since Linux 5.11. The only change needed to get ExtensionDirectories to work is to avoid hard-coding the staging directory to the system manager runtime directory, everything else just works (TM).	2022-03-10 20:38:10 +00:00
Luca Boccassi	ea63a260d4	core: support MountAPIVFS and RootDirectory in user manager ... The only piece missing was to somehow make /proc appear in the new user+mount namespace. It is not possible to mount a new /proc instance, not even with hidepid=invisible,subset=pid, in a user namespace unless a PID namespace is created too (and also at the same time as the other namespaces, it is not possible to mount a new /proc in a child process that creates a PID namespace forked from a parent that created a user+mount namespace, it has to happen at the same time). Use the host's /proc with a bind-mount as a fallback for this case. User session services would already run with it, so nothing is lost.	2022-03-10 10:21:03 +00:00
Luca Boccassi	4c0ab40ab8	test: set log level of user manager in TEST-43 to debug	2022-03-09 02:08:25 +00:00
Zbigniew Jędrzejewski-Szmek	7b3cec95db	tests: add spdx headers to scripts and Makefiles	2021-10-18 09:04:45 +02:00
Frantisek Sumsal	84031b5d6e	test: bunch of assorted tweaks to make shellcheck happy	2021-04-13 19:14:35 +02:00
Frantisek Sumsal	084575ff91	test: use set -eux and set -o pipefail everywhere ... This should make the scripts more robust.	2021-04-13 12:08:01 +02:00
Zbigniew Jędrzejewski-Szmek	d933ccd30b	TEST-43: fix exit condition testing ... We were invoking 'systemd-run bash', but the test invoked by bash was not effective. When the result of that check is propagated, the outer command fails.	2021-04-08 20:21:50 +02:00
Zbigniew Jędrzejewski-Szmek	0ee994836c	TEST-*: use spacing before redirection operator, but not after ... << EOF → <<EOF > foo < bar → >foo <bar	2021-04-08 20:21:50 +02:00
Frantisek Sumsal	8441ff6886	test: make the systemd-run calls synchronous ... Otherwise we might be checking results of such calls before they even finish, causing nasty races like: ``` [ 15.656530] testsuite-43.sh[303]: + su testuser -s /bin/sh -c 'XDG_RUNTIME_DIR=/run/user/$UID exec "$@"' -- sh systemd-run --user --unit=test-unprotected-home -P touch /home/testuser/works.txt ... [ 15.757744] testsuite-43.sh[324]: Running as unit: test-unprotected-home.service [ 15.775611] systemd[296]: Started /usr/bin/touch /home/testuser/works.txt. [ 15.783597] testsuite-43.sh[303]: + test -e /home/testuser/works.txt [ 15.787542] systemd[296]: test-unprotected-home.service: Succeeded. ... [ 15.787684] systemd[1]: Received SIGCHLD from PID 303 (bash). [ 15.787790] systemd[1]: Child 303 (bash) died (code=exited, status=1/FAILURE) [ 15.787881] systemd[1]: testsuite-43.service: Child 303 belongs to testsuite-43.service. [ 15.788040] systemd[1]: testsuite-43.service: Main process exited, code=exited, status=1/FAILURE [ 15.788224] systemd[1]: testsuite-43.service: Failed with result 'exit-code'. [ 15.788333] systemd[1]: testsuite-43.service: Service will not restart (restart setting) [ 15.788421] systemd[1]: testsuite-43.service: Changed start -> failed [ 15.788790] systemd[1]: testsuite-43.service: Job 160 testsuite-43.service/start finished, result=failed [ 15.788995] systemd[1]: Failed to start testsuite-43.service. ```	2020-05-27 08:36:57 +02:00
Zbigniew Jędrzejewski-Szmek	d0ac89a1e8	test: move TEST-43-* setup to static files ... Setup of lingering is dropped. I don't think it's necessary for anything, because the unit is still pulled in from the testsuite service.	2020-03-28 11:46:48 +01:00