Skip to content

Conversation

@kolyshkin
Copy link
Contributor

This is a backport of PR #3051 to release-1.0 branch to fix CI. Clean cherry-pick, no issues, original description follows.

The test is failing like this:

not ok 70 runc run --no-pivot must not expose bare /proc
# (in test file tests/integration/no_pivot.bats, line 20)
#   `[[ "$output" == *"mount: permission denied"* ]]' failed
# runc spec (status=0):
#
# runc run --no-pivot test_no_pivot (status=1):
# unshare: write error: Operation not permitted

Apparently, a recent kernel commit db2e718a47984b9d prevents
root from doing unshare -r unless it has CAP_SETFPCAP.

Add the capability for this specific test.

Signed-off-by: Kir Kolyshkin kolyshkin@gmail.com
(cherry picked from commit 1bbeada)
Signed-off-by: Kir Kolyshkin kolyshkin@gmail.com

The test is failing like this:

	not ok 70 runc run --no-pivot must not expose bare /proc
	# (in test file tests/integration/no_pivot.bats, line 20)
	#   `[[ "$output" == *"mount: permission denied"* ]]' failed
	# runc spec (status=0):
	#
	# runc run --no-pivot test_no_pivot (status=1):
	# unshare: write error: Operation not permitted

Apparently, a recent kernel commit db2e718a47984b9d prevents
root from doing unshare -r unless it has CAP_SETFPCAP.

Add the capability for this specific test.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
(cherry picked from commit 1bbeada)
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
@kolyshkin kolyshkin added this to the 1.0.1 milestone Jul 8, 2021
@mrunalp mrunalp merged commit 8fad08a into opencontainers:release-1.0 Jul 8, 2021
@cyphar cyphar added the backport/1.0-pr A backport PR to release-1.0 label Jul 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/1.0-pr A backport PR to release-1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants