//go:build testsuite || tester package testdata import ( "os" "syscall" "hakurei.app/fhs" "hakurei.app/hst" "hakurei.app/test/internal/mountinfo" "hakurei.app/test/internal/testsuite" ) var _ = TestCase{ Hakurei: hst.Config{ ID: "app.hakurei.sample.mapuid", Enablements: new(hst.EWayland | hst.EPipeWire | hst.EDBus), Identity: 3, Container: &hst.ContainerConfig{ Hostname: "hakurei-sample-mapuid", Filesystem: []hst.FilesystemConfigJSON{ fcLinker, fcLib, fcTestHelper, }, Username: "u0_a3", Shell: fhs.AbsUsrBin.Append("bash"), Home: hst.AbsPrivateTmp, Path: absTestHelper, Args: []string{"tester", "mapuid"}, Flags: hst.FMapRealUID | hst.FShareRuntime | hst.FShareTmpdir, }, }, // 0, PresetStrict Sum: sumSimple, Env: []string{ "DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus", "HOME=/.hakurei", "SHELL=/usr/bin/bash", "TERM=xterm", "USER=u0_a3", "WAYLAND_DISPLAY=wayland-0", "XDG_RUNTIME_DIR=/run/user/1000", "XDG_SESSION_CLASS=user", "XDG_SESSION_TYPE=wayland", "PULSE_SERVER=unix:/run/user/1000/pulse/native", }, FS: &testsuite.FS{Dir: dir{ ".hakurei": {Mode: os.ModeDir | 0755, Dir: dir{ "test-helper": {Mode: 0755}, }}, // unstable host dev "dev": {Mode: os.ModeDir | 0755}, "etc": {Mode: os.ModeDir | 0755, Dir: dir{ "passwd": {Mode: 0600, Data: new("u0_a3:x:1000:100:Hakurei:/.hakurei:/usr/bin/bash\n")}, "group": {Mode: 0600, Data: new("hakurei:x:100:\n")}, }}, "lib64": {Mode: os.ModeDir | 0755, Dir: dir{ "ld-linux-x86-64.so.2": {Mode: os.ModeSymlink | 0777}, }}, "run": {Mode: os.ModeDir | 0755, Dir: dir{ "user": {Mode: os.ModeDir | 0755, Dir: dir{ "1000": {Mode: os.ModeDir | 0770, Dir: dir{ "bus": {Mode: os.ModeSocket | 0775}, "wayland-0": {Mode: os.ModeSocket | 070}, "pulse": {Mode: os.ModeDir | 0700, Dir: dir{ "native": {Mode: os.ModeSocket | 0777}, }}, }}, }}, }}, "tmp": {Mode: os.ModeDir | 0770, Dir: dir{}}, "lib": {Mode: os.ModeDir | 0755}, "proc": {Mode: os.ModeDir | 0555}, }}, Mount: []*mountinfo.Entry{ r("/sysroot", "/", "ro,nosuid,nodev,relatime", "tmpfs", "rootfs", "rw,uid=110002,gid=110002,inode64"), r("/", "/proc", "rw,nosuid,nodev,noexec,relatime", "proc", "proc", "rw"), r("/", "/.hakurei", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,size=4k,mode=755,uid=110002,gid=110002,inode64"), r("/", "/dev", "ro,nosuid,nodev,relatime", "tmpfs", "devtmpfs", "rw,mode=755,uid=110002,gid=110002,inode64"), r("/null", "/dev/null", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore), r("/zero", "/dev/zero", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore), r("/full", "/dev/full", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore), r("/random", "/dev/random", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore), r("/urandom", "/dev/urandom", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore), r("/tty", "/dev/tty", "rw,nosuid,noexec,relatime", "devtmpfs", "devtmpfs", ignore), r("/", "/dev/pts", "rw,nosuid,noexec,relatime", "devpts", "devpts", "rw,mode=620,ptmxmode=666"), r("/", "/dev/mqueue", "rw,nosuid,nodev,noexec,relatime", "mqueue", "mqueue", "rw"), r("/", "/dev/shm", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,uid=110002,gid=110002,inode64"), r("/", "/run/user", "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", "rw,size=16384k,mode=755,uid=110002,gid=110002,inode64"), r("/tmp/hakurei.0/runtime/3", "/run/user/1000", "rw,nosuid,nodev,relatime", "overlay", "overlay", ignore), r("/tmp/hakurei.0/tmpdir/3", "/tmp", "rw,nosuid,nodev,relatime", "overlay", "overlay", ignore), r(ignore, "/etc/passwd", "ro,nosuid,nodev,relatime", "tmpfs", "rootfs", "rw,uid=110002,gid=110002,inode64"), r(ignore, "/etc/group", "ro,nosuid,nodev,relatime", "tmpfs", "rootfs", "rw,uid=110002,gid=110002,inode64"), r(ignore, "/run/user/1000/wayland-0", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore), r(ignore, "/run/user/1000/bus", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore), r("/usr/lib", "/lib", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore), r("/opt/test-helper/bin/tester", "/.hakurei/test-helper", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore), r(ignore, "/run/user/1000/pulse/native", "ro,nosuid,nodev,relatime", "overlay", "overlay", ignore), }, Seccomp: true, TrySocket: "/tmp/.X11-unix/X0", ErrnoAbstract: syscall.ECONNREFUSED, ErrnoPathname: syscall.ENOENT, }.register("mapuid")