mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
b3ee9ac74e
Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux)
152 lines
4.6 KiB
Go
152 lines
4.6 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"os"
|
|
"os/exec"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/docker/docker/pkg/iptables"
|
|
)
|
|
|
|
func TestEtcHostsRegularFile(t *testing.T) {
|
|
runCmd := exec.Command(dockerBinary, "run", "--net=host", "busybox", "ls", "-la", "/etc/hosts")
|
|
out, _, _, err := runCommandWithStdoutStderr(runCmd)
|
|
errorOut(err, t, out)
|
|
|
|
if !strings.HasPrefix(out, "-") {
|
|
t.Errorf("/etc/hosts should be a regular file")
|
|
}
|
|
|
|
deleteAllContainers()
|
|
|
|
logDone("link - /etc/hosts is a regular file")
|
|
}
|
|
|
|
func TestEtcHostsContentMatch(t *testing.T) {
|
|
runCmd := exec.Command(dockerBinary, "run", "--net=host", "busybox", "cat", "/etc/hosts")
|
|
out, _, _, err := runCommandWithStdoutStderr(runCmd)
|
|
errorOut(err, t, out)
|
|
|
|
hosts, err := ioutil.ReadFile("/etc/hosts")
|
|
if os.IsNotExist(err) {
|
|
t.Skip("/etc/hosts does not exist, skip this test")
|
|
}
|
|
|
|
if out != string(hosts) {
|
|
t.Errorf("container")
|
|
}
|
|
|
|
deleteAllContainers()
|
|
|
|
logDone("link - /etc/hosts matches hosts copy")
|
|
}
|
|
|
|
func TestPingUnlinkedContainers(t *testing.T) {
|
|
runCmd := exec.Command(dockerBinary, "run", "--rm", "busybox", "sh", "-c", "ping -c 1 alias1 -W 1 && ping -c 1 alias2 -W 1")
|
|
exitCode, err := runCommand(runCmd)
|
|
|
|
if exitCode == 0 {
|
|
t.Fatal("run ping did not fail")
|
|
} else if exitCode != 1 {
|
|
errorOut(err, t, fmt.Sprintf("run ping failed with errors: %v", err))
|
|
}
|
|
}
|
|
|
|
func TestPingLinkedContainers(t *testing.T) {
|
|
var out string
|
|
out, _, _ = cmd(t, "run", "-d", "--name", "container1", "busybox", "sleep", "10")
|
|
idA := stripTrailingCharacters(out)
|
|
out, _, _ = cmd(t, "run", "-d", "--name", "container2", "busybox", "sleep", "10")
|
|
idB := stripTrailingCharacters(out)
|
|
cmd(t, "run", "--rm", "--link", "container1:alias1", "--link", "container2:alias2", "busybox", "sh", "-c", "ping -c 1 alias1 -W 1 && ping -c 1 alias2 -W 1")
|
|
cmd(t, "kill", idA)
|
|
cmd(t, "kill", idB)
|
|
deleteAllContainers()
|
|
}
|
|
|
|
func TestIpTablesRulesWhenLinkAndUnlink(t *testing.T) {
|
|
cmd(t, "run", "-d", "--name", "child", "--publish", "8080:80", "busybox", "sleep", "10")
|
|
cmd(t, "run", "-d", "--name", "parent", "--link", "child:http", "busybox", "sleep", "10")
|
|
|
|
childIp := findContainerIp(t, "child")
|
|
parentIp := findContainerIp(t, "parent")
|
|
|
|
sourceRule := []string{"FORWARD", "-i", "docker0", "-o", "docker0", "-p", "tcp", "-s", childIp, "--sport", "80", "-d", parentIp, "-j", "ACCEPT"}
|
|
destinationRule := []string{"FORWARD", "-i", "docker0", "-o", "docker0", "-p", "tcp", "-s", parentIp, "--dport", "80", "-d", childIp, "-j", "ACCEPT"}
|
|
if !iptables.Exists(sourceRule...) || !iptables.Exists(destinationRule...) {
|
|
t.Fatal("Iptables rules not found")
|
|
}
|
|
|
|
cmd(t, "rm", "--link", "parent/http")
|
|
if iptables.Exists(sourceRule...) || iptables.Exists(destinationRule...) {
|
|
t.Fatal("Iptables rules should be removed when unlink")
|
|
}
|
|
|
|
cmd(t, "kill", "child")
|
|
cmd(t, "kill", "parent")
|
|
deleteAllContainers()
|
|
|
|
logDone("link - verify iptables when link and unlink")
|
|
}
|
|
|
|
func TestInspectLinksStarted(t *testing.T) {
|
|
var (
|
|
expected = map[string]struct{}{"/container1:/testinspectlink/alias1": {}, "/container2:/testinspectlink/alias2": {}}
|
|
result []string
|
|
)
|
|
defer deleteAllContainers()
|
|
cmd(t, "run", "-d", "--name", "container1", "busybox", "sleep", "10")
|
|
cmd(t, "run", "-d", "--name", "container2", "busybox", "sleep", "10")
|
|
cmd(t, "run", "-d", "--name", "testinspectlink", "--link", "container1:alias1", "--link", "container2:alias2", "busybox", "sleep", "10")
|
|
links, err := inspectFieldJSON("testinspectlink", "HostConfig.Links")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
err = unmarshalJSON([]byte(links), &result)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
output := convertSliceOfStringsToMap(result)
|
|
|
|
equal := deepEqual(expected, output)
|
|
|
|
if !equal {
|
|
t.Fatalf("Links %s, expected %s", result, expected)
|
|
}
|
|
logDone("link - links in started container inspect")
|
|
}
|
|
|
|
func TestInspectLinksStopped(t *testing.T) {
|
|
var (
|
|
expected = map[string]struct{}{"/container1:/testinspectlink/alias1": {}, "/container2:/testinspectlink/alias2": {}}
|
|
result []string
|
|
)
|
|
defer deleteAllContainers()
|
|
cmd(t, "run", "-d", "--name", "container1", "busybox", "sleep", "10")
|
|
cmd(t, "run", "-d", "--name", "container2", "busybox", "sleep", "10")
|
|
cmd(t, "run", "-d", "--name", "testinspectlink", "--link", "container1:alias1", "--link", "container2:alias2", "busybox", "true")
|
|
links, err := inspectFieldJSON("testinspectlink", "HostConfig.Links")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
err = unmarshalJSON([]byte(links), &result)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
output := convertSliceOfStringsToMap(result)
|
|
|
|
equal := deepEqual(expected, output)
|
|
|
|
if !equal {
|
|
t.Fatalf("Links %s, but expected %s", result, expected)
|
|
}
|
|
|
|
logDone("link - links in stopped container inspect")
|
|
}
|