diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-10-19 03:53:20 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-10-19 04:11:38 +0900 |
| commit | 699c19e972a3cbcc714403aedffcb5ff74386cfc (patch) | |
| tree | 4f279d0e917d21dc8e40409691b93bbbf44c7667 /test | |
| parent | b5b30aea2eca15b8a0c9e01d6e3d0e844c99890c (diff) | |
hst/container: optional runtime and tmpdir sharing
Sharing and persisting these directories do not always make sense. Make it optional here.
Closes #16.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'test')
| -rw-r--r-- | test/sandbox/case/default.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/device.nix | 5 | ||||
| -rw-r--r-- | test/sandbox/case/mapuid.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/pdlike.nix | 2 | ||||
| -rw-r--r-- | test/sandbox/case/preset.nix | 9 | ||||
| -rw-r--r-- | test/sandbox/case/tty.nix | 6 |
6 files changed, 18 insertions, 8 deletions
diff --git a/test/sandbox/case/default.nix b/test/sandbox/case/default.nix index b6ce3a2a..337f4bf2 100644 --- a/test/sandbox/case/default.nix +++ b/test/sandbox/case/default.nix @@ -50,6 +50,8 @@ let useCommonPaths userns hostAbstract + shareRuntime + shareTmpdir ; enablements = { inherit (tc) x11; diff --git a/test/sandbox/case/device.nix b/test/sandbox/case/device.nix index da0c974e..dec3e380 100644 --- a/test/sandbox/case/device.nix +++ b/test/sandbox/case/device.nix @@ -27,6 +27,8 @@ in userns = false; x11 = true; hostAbstract = false; + shareRuntime = false; + shareTmpdir = true; # 0, PresetStrict expectedFilter = { @@ -133,7 +135,7 @@ in current-system = fs "80001ff" null null; opengl-driver = fs "80001ff" null null; user = fs "800001ed" { - "65534" = fs "800001f8" { + "65534" = fs "800001c0" { bus = fs "10001fd" null null; pulse = fs "800001c0" { native = fs "10001b6" null null; } null; wayland-0 = fs "1000038" null null; @@ -219,7 +221,6 @@ in (ent "/" ignore ignore ignore ignore ignore) (ent "/" "/dev/shm" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,uid=1000004,gid=1000004") (ent "/" "/run/user" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,size=4k,mode=755,uid=1000004,gid=1000004") - (ent "/tmp/hakurei.0/runtime/4" "/run/user/65534" "rw,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") (ent "/tmp/hakurei.0/tmpdir/4" "/tmp" "rw,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") (ent ignore "/etc/passwd" "ro,nosuid,nodev,relatime" "tmpfs" "rootfs" "rw,uid=1000004,gid=1000004") (ent ignore "/etc/group" "ro,nosuid,nodev,relatime" "tmpfs" "rootfs" "rw,uid=1000004,gid=1000004") diff --git a/test/sandbox/case/mapuid.nix b/test/sandbox/case/mapuid.nix index b3caf9da..1e007f1d 100644 --- a/test/sandbox/case/mapuid.nix +++ b/test/sandbox/case/mapuid.nix @@ -36,6 +36,8 @@ in userns = false; x11 = false; hostAbstract = false; + shareRuntime = true; + shareTmpdir = true; # 0, PresetStrict expectedFilter = { diff --git a/test/sandbox/case/pdlike.nix b/test/sandbox/case/pdlike.nix index c078fac2..e5354be3 100644 --- a/test/sandbox/case/pdlike.nix +++ b/test/sandbox/case/pdlike.nix @@ -36,6 +36,8 @@ in userns = true; x11 = false; hostAbstract = false; + shareRuntime = true; + shareTmpdir = true; # 0, PresetExt | PresetDenyDevel expectedFilter = { diff --git a/test/sandbox/case/preset.nix b/test/sandbox/case/preset.nix index 10b2634c..7cb6ed04 100644 --- a/test/sandbox/case/preset.nix +++ b/test/sandbox/case/preset.nix @@ -36,6 +36,8 @@ in userns = false; x11 = false; hostAbstract = false; + shareRuntime = false; + shareTmpdir = false; # 0, PresetStrict expectedFilter = { @@ -155,7 +157,7 @@ in current-system = fs "80001ff" null null; opengl-driver = fs "80001ff" null null; user = fs "800001ed" { - "65534" = fs "800001f8" { + "65534" = fs "800001c0" { bus = fs "10001fd" null null; pulse = fs "800001c0" { native = fs "10001b6" null null; } null; wayland-0 = fs "1000038" null null; @@ -186,7 +188,7 @@ in } null; devices = fs "800001ed" null null; } null; - tmp = fs "800001f8" { } null; + tmp = fs "801001ff" { } null; usr = fs "800001c0" { bin = fs "800001ed" { env = fs "80001ff" null null; } null; } null; var = fs "800001c0" { tmp = fs "801001ff" null null; @@ -242,8 +244,7 @@ in (ent "/" "/dev/mqueue" "rw,nosuid,nodev,noexec,relatime" "mqueue" "mqueue" "rw") (ent "/" "/dev/shm" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,uid=1000001,gid=1000001") (ent "/" "/run/user" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,size=4k,mode=755,uid=1000001,gid=1000001") - (ent "/tmp/hakurei.0/runtime/1" "/run/user/65534" "rw,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") - (ent "/tmp/hakurei.0/tmpdir/1" "/tmp" "rw,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") + (ent "/" "/tmp" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,uid=1000001,gid=1000001") (ent ignore "/etc/passwd" "ro,nosuid,nodev,relatime" "tmpfs" "rootfs" "rw,uid=1000001,gid=1000001") (ent ignore "/etc/group" "ro,nosuid,nodev,relatime" "tmpfs" "rootfs" "rw,uid=1000001,gid=1000001") (ent ignore "/run/user/65534/wayland-0" "ro,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") diff --git a/test/sandbox/case/tty.nix b/test/sandbox/case/tty.nix index 02dc0cc8..eca345af 100644 --- a/test/sandbox/case/tty.nix +++ b/test/sandbox/case/tty.nix @@ -36,6 +36,8 @@ in userns = false; x11 = true; hostAbstract = true; + shareRuntime = true; + shareTmpdir = false; # 0, PresetExt | PresetDenyNS | PresetDenyDevel expectedFilter = { @@ -191,7 +193,7 @@ in } null; devices = fs "800001ed" null null; } null; - tmp = fs "800001f8" { + tmp = fs "801001ff" { ".X11-unix" = fs "801001ff" { X0 = fs "10001fd" null null; } null; } null; usr = fs "800001c0" { bin = fs "800001ed" { env = fs "80001ff" null null; } null; } null; @@ -252,7 +254,7 @@ in (ent "/" "/dev/shm" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,uid=1000002,gid=1000002") (ent "/" "/run/user" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,size=4k,mode=755,uid=1000002,gid=1000002") (ent "/tmp/hakurei.0/runtime/2" "/run/user/65534" "rw,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") - (ent "/tmp/hakurei.0/tmpdir/2" "/tmp" "rw,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") + (ent "/" "/tmp" "rw,nosuid,nodev,relatime" "tmpfs" "ephemeral" "rw,uid=1000002,gid=1000002") (ent ignore "/etc/passwd" "ro,nosuid,nodev,relatime" "tmpfs" "rootfs" "rw,uid=1000002,gid=1000002") (ent ignore "/etc/group" "ro,nosuid,nodev,relatime" "tmpfs" "rootfs" "rw,uid=1000002,gid=1000002") (ent ignore "/run/user/65534/wayland-0" "ro,nosuid,nodev,relatime" "ext4" "/dev/disk/by-label/nixos" "rw") |
