ct_userns_self.c

/*
 * Test empty "container" creation
 */
#include <libct.h>
#include <stdio.h>
#include <sys/mman.h>
#include <linux/sched.h>
#include <sys/mount.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <unistd.h>
#include <sched.h>

#include "test.h"

static int set_ct_alive(void *a)
{
	if (getuid() != 0)
		return -1;
	if (getgid() != 0)
		return -1;

	*(int *)a = 1;
	return 0;
}

int main(int argc, char **argv)
{
	int *ct_alive, status;
	libct_session_t s;
	ct_handler_t ct;
	ct_process_desc_t p;
	ct_process_t pr;

	ct_alive = mmap(NULL, 4096, PROT_READ | PROT_WRITE,
			MAP_SHARED | MAP_ANON, 0, 0);
	*ct_alive = 0;

	s = libct_session_open_local();
	ct = libct_container_create(s, "test");
	p = libct_process_desc_create(s);
	if (libct_container_set_nsmask(ct, CLONE_NEWPID | CLONE_NEWUSER | CLONE_NEWNS))
		return fail("Unable to set nsmask");

	if (libct_userns_add_uid_map(ct, 0, getuid(), 1) ||
	    libct_userns_add_gid_map(ct, 0, getgid(), 1))
		return fail("Unable to set {u,g}id mappings");
	if (libct_fs_add_mount(ct, "tmpfs", "/tmp", 0, "tmpfs", NULL))
		return fail("Unable to add /tmp");
	pr = libct_container_spawn_cb(ct, p, set_ct_alive, ct_alive);
	if (libct_handle_is_err(pr))
		return fail("Unable to start CT");
	if (libct_process_wait(pr, &status))
		return fail("Unable to wait process");
	if (libct_container_wait(ct))
		return fail("Unable to wait CT");
	libct_container_destroy(ct);
	libct_session_close(s);

	if (!*ct_alive)
		return fail("Container is not alive");
	else
		return pass("Container is alive");
}