| Commit message (Expand) | Author | Age | Files | Lines |
* | build: container: Add feature test predicates.•••* gnu/build/linux-container.scm (user-namespace-supported?,
unprivileged-user-namespace-supported?, setgroups-supported?): New
procedures.
* tests/container.scm: Use predicates.
* tests/syscalls.scm: Likewise.
| David Thompson | 2015-11-03 | 1 | -2/+3 |
* | build: container: Fix call-with-clean-exit.•••Before, call-with-clean-exit would *always* return an exit code of 1.
* gnu/build/linux-container.scm (call-with-clean-exit): Exit with status
code of 0 if thunk does not throw an exception.
* tests/containers.scm: Add test.
| David Thompson | 2015-10-10 | 1 | -0/+4 |
* | tests: containers: Skip if setgroups file does not exist.•••Fixes bug #21226.
Linux 3.19 introduced a fix for a security vulnerability in user namespaces.
This fix introduced a new proc file called 'setgroups' and was backported to
many older kernels. However, some users run a kernel that is new enough to
support user namespaces yet old enough to not include the patch, so we must
skip the tests.
* tests/containers.scm: Skip all tests if /proc/self/setgroups does not exist.
| David Thompson | 2015-08-11 | 1 | -2/+4 |
* | build: container: Add #:host-uids argument to call-with-container.•••It's not always possible to map 65536 uids when creating a container as the
root user within another user namespace. This is true when building Guix
within the build daemon's container. By using a uid range of 1 by default,
even as the root user, the tests now pass.
* gnu/build/linux-container.scm (initialize-user-namespace, run-container):
Add 'host-uids' argument.
(call-with-container): Add #:host-uids keyword argument.
* tests/containers.scm ("container-excursion"): Update 'run-container' call.
| David Thompson | 2015-08-08 | 1 | -1/+1 |
* | tests: Skip container tests if namespaces are not available.•••* tests/containers.scm: Skip all tests if user namespaces do not exist.
| David Thompson | 2015-07-20 | 1 | -0/+4 |
* | gnu: build: Add Linux container module.•••* gnu/build/linux-container.scm: New file.
* gnu-system.am (GNU_SYSTEM_MODULES): Add it.
* .dir-locals.el: Add Scheme indent rules for 'call-with-container', and
'container-excursion'.
* tests/containers.scm: New file.
* Makefile.am (SCM_TESTS): Add it.
| David Thompson | 2015-07-09 | 1 | -0/+136 |