systemd/test/fuzz/fuzz-nspawn-oci/basic.json

{
    "ociVersion": "1.0.0",

    "root": {
        "path": "rootfs",
        "readonly": true
    },

    "process": {
        "terminal": false,
        "consoleSize": {
            "height":6667,
            "width":6668
        },

        "user": {
            "uid": 14,
            "gid": 14,
            "additionalGids": [59, 81]
        },

        "args": [
            "/tmp/verify.sh"
        ],

        "env": [
            "FOO=BAR",
            "WITHSPACES=FOO BAR",
            "WITHSHELLCHARS=$ASDF \\\"asdf asdf\\\" !",
            "WITHCONTROLCHARS=\\123\\125\\010\\020",
            "TERM=xterm"
        ],

        "cwd": "/tmp/src",

        "rlimits": [
            {
                "type": "RLIMIT_NOFILE",
                "hard": 1020,
                "soft": 1020
            }
        ]
    },

    "mounts": [
        {
            "destination": "/tmp/src",
            "source": "src",
            "options": ["ro"]
        },

        {
            "destination": "/tmp/verify.sh",
            "source": "verify.sh",
            "options": ["ro"]
        },

        {
            "destination": "/proc",
            "type": "proc",
            "source": "proc"
        },
        {
            "destination": "/dev",
            "type": "tmpfs",
            "source": "tmpfs",
            "options": [
                "mode=777"
            ]
        },
        {
            "destination": "/dev/pts",
            "type": "devpts",
            "source": "devpts",
            "options": [
                "mode=777"
            ]
        },
        {
            "destination": "/dev/shm",
            "type": "tmpfs",
            "source": "shm",
            "options": [
                "mode=777"
            ]
        },
        {
            "destination": "/dev/mqueue",
            "type": "mqueue",
            "source": "mqueue",
            "options": [
                "mode=777"
            ]
        },
        {
            "destination": "/sys",
            "type": "sysfs",
            "source": "sysfs",
            "options": [
                "mode=777"
            ]
        },
        {
            "destination": "/sys/fs/cgroup",
            "type": "cgroup",
            "source": "cgroup",
            "options": [
                "mode=777"
            ]
        }
    ],

    "hooks": {},

    "linux": {
        "resources": {
            "devices": [
                {
                    "allow": false,
                    "access": "rwm"
                }
            ]
        },
        "namespaces": [
            {
                "type": "pid"
            },
            {
                "type": "ipc"
            },
            {
                "type": "mount"
            }
        ]
    },

    "annotations": {
        "com.example.key1": "value1",
        "com.example.key2": "value2"
    }
}