kotovalexarian-likes-github
/
moby--moby
mirror of https://github.com/moby/moby.git
1
0
Fork 0
Code Releases Activity
moby--moby/contrib/syscall-test/Dockerfile

12 lines
331 B
Docker
Raw Normal View History

Switch "syscall-test" image from "debian:jessie" to "buildpack-deps:jessie" so that "gcc" is already included This results in a significant time savings during repeated builds (since we don't have to re-download gcc for every test run). Signed-off-by: Andrew "Tianon" Page <admwiggin@gmail.com>
2016-01-14 16:51:30 -05:00
FROM buildpack-deps:jessie
add more seccomp profile tests Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-12-30 14:20:23 -05:00
COPY . /usr/src/
WORKDIR /usr/src/
RUN gcc -g -Wall -static userns.c -o /usr/bin/userns-test \
&& gcc -g -Wall -static ns.c -o /usr/bin/ns-test \
&& gcc -g -Wall -static acct.c -o /usr/bin/acct-test
Add a test that the default seccomp profile allows execution of 32 bit binaries While testing #24510 I noticed that 32 bit syscalls were incorrectly being blocked and we did not have a test for this, so adding one. This is only tested on amd64 as it is the only architecture that reliably supports 32 bit code execution, others only do sometimes. There is no 32 bit libc in the buildpack-deps so we cannot build 32 bit C code easily so use the simplest assembly program which just calls the exit syscall. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-27 13:42:34 -04:00
RUN [ "$(uname -m)" = "x86_64" ] && gcc -s -m32 -nostdlib exit32.s -o /usr/bin/exit32-test || true