40 Commits

Author SHA1 Message Date
Lucas Manning 8555758760 Add a test for tcpdump.
PiperOrigin-RevId: 726094500
2025-02-12 09:59:11 -08:00
xianzhe-databricks c4f686f4e1 Add a new RPC ConnectWithCreds to allow gofer to connect to a unix domain socket with application's credentials 2025-01-03 17:50:06 +01:00
Jing Chen 6666e9fc85 Extract ipv4 address only when starting docker in gVisor.
The address will be used to set up filter rules.

PiperOrigin-RevId: 697883823
2024-11-18 22:55:38 -08:00
Andrei Vagin c5775dbd0f image_test/ruby: instal a web server
It should fix this error:
+ ruby /src/ruby.rb
/usr/local/bundle/gems/rackup-2.2.0/lib/rackup/handler.rb:81:in `pick': Couldn't find handler for: puma, falcon, thin, HTTP, webrick. (LoadError)
	from /usr/local/bundle/gems/sinatra-4.0.0/lib/sinatra/base.rb:1624:in `run!'
	from /usr/local/bundle/gems/sinatra-4.0.0/lib/sinatra/main.rb:47:in `block in <module:Sinatra>'

PiperOrigin-RevId: 693089452
2024-11-04 14:20:32 -08:00
Etienne Perot e13cf36ad7 Update all GPU tests to use the ioctl sniffer.
Fixes issue #10885.

PiperOrigin-RevId: 688728104
2024-10-22 16:21:47 -07:00
Nayana Bidari a7b512f44e Add a C/R test for TCP listening connection.
This CL adds a test which verifies that the listening connections are restored
correctly after checkpoint. The test checkpoints when the tcp server is in the
listen state and verifies the read/write operations after the tcp server is
restored.

PiperOrigin-RevId: 684505213
2024-10-10 11:06:12 -07:00
Etienne Perot 1ea84d6db0 Add test that runs runsc do inside a non-gVisor container.
This is used in contexts such as Dangerzone:
https://gvisor.dev/blog/2024/09/23/safe-ride-into-the-dangerzone/

Updates issue #10944.

PiperOrigin-RevId: 682454284
2024-10-04 14:40:07 -07:00
Jing Chen 6a506950b3 Start dockerd with the default bridge network in gVisor.
PiperOrigin-RevId: 653309522
2024-07-17 11:48:16 -07:00
Jing Chen 586c38d700 Apply a image's file capabilities when creating a process from the image.
PiperOrigin-RevId: 616237209
2024-03-15 14:08:39 -07:00
Jing Chen a5f0778c38 Add a hello world docker image test for rust runtime.
PiperOrigin-RevId: 603161919
2024-01-31 14:38:10 -08:00
Andrei Vagin 2de5431306 Update the ruby image
PiperOrigin-RevId: 599926995
2024-01-19 13:50:50 -08:00
Nayana Bidari 29234bc44b Mount cgroups per container in runsc.
Adds support for per container stats in runsc based on cgroups.
1. Removed the 'cgroupfs' config flag.
2. Mounts the cgroups (/sys/fs/cgroup/<controller>) which will be shared
across all containers during root/pause container startup.
3. The container cgroups (eg:/sys/fs/cgroup/controller/<container-id>) are
mounted along with other container mounts before starting the container
process if the cgroups mount is in the spec.

Updates #172

PiperOrigin-RevId: 590752853
2023-12-13 16:47:49 -08:00
Andrei Vagin 1918283b03 Test docker in gVisor
PiperOrigin-RevId: 577322946
2023-10-27 15:41:42 -07:00
Zach Koopmans 54ef8c70dd Add cos_gpu_test that will run GPU container on COS.
Add GPU test that runs on COS. The container instructions can
be found here: https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus#configure_containers_to_consume_gpus

PiperOrigin-RevId: 575042089
2023-10-19 16:55:52 -07:00
Etienne Perot 8ab26ff0ce Update Redis version in Redis benchmark and test images.
PiperOrigin-RevId: 552623623
2023-07-31 16:30:08 -07:00
Fabricio Voznika 919cfd12bd Add FIONREAD to host file description
Closes #8544

PiperOrigin-RevId: 535456427
2023-05-25 18:25:42 -07:00
Zach Koopmans 2e45ce14a4 Fix flakes in portforward test.
Attempt to fix flaky port forward test using "netstat" in the container
to check the a process is listening on the port before attempting to
connect.

Also, re-enable the test in a seperate job, but w/ a soft fail. This
will be removed later in favor of adding port-forward to integration
tests to remove the high overhead of starting a new job (scheduling,
compiling runsc, downloading images, etc).

PiperOrigin-RevId: 526135859
2023-04-21 14:28:31 -07:00
Zach Koopmans 460a9fcc20 Add portforward stream mode.
Port forward stream mode will be used for k8s. Stream mode takes a
UNIX socket and donates a connected FD to the sandbox in question,
and returns. No proxy process is kept around to do the transfer
and the UDS will be returned to containerd as the address on which
to send i/o to the forwarded port.

PiperOrigin-RevId: 521823250
2023-04-04 11:46:21 -07:00
Zach Koopmans f92957314c Add portforward command to runsc
Add portforward comand so that we can use runsc to forward connections
to container ports. This will eventually be supported in k8s.

PiperOrigin-RevId: 520739913
2023-03-30 14:16:19 -07:00
Ayush Ranjan 681c7ddd5a Add docker test for external UDS connect.
Serves as a regression test for #8126.
Our unit tests didn't catch the issue because they run runsc with the flag
-TESTONLY-unsafe-nonroot. Docker tests are more e2e, they run tests in Docker
containers.

Fixes #8126

PiperOrigin-RevId: 488945922
2022-11-16 08:26:21 -08:00
Andrei Vagin bb1a83085b buildkite: allow to run containerd tests on arm64
k8s.gcr.io/busybox:latest doesn't have the arm variant, so
let's use the upstream busybox and create /etc/recolv.conf symlink.

PiperOrigin-RevId: 450059917
2022-05-20 14:11:04 -07:00
Andrei Vagin ad8960f604 Allow to run packetdrill and fsstress tests on arm64
PiperOrigin-RevId: 449900552
2022-05-19 21:33:59 -07:00
gVisor bot 4c7dba96f8 Merge pull request #7167 from zhlhahaha:2438
PiperOrigin-RevId: 433048695
2022-03-07 15:03:09 -08:00
Fabricio Voznika dfcf798425 Fix epoll_ctl(2) regular files and dirs
Linux behaves differently for regular files and dirs for poll(2)/select(2)
compared to epoll_ctl(2). The latter returns EPERM for file and dirs.
I've also changed host FDs to behave like the underlying FD in regards
to epoll to keep it compatible with docker.

Fixes #7134

PiperOrigin-RevId: 429412692
2022-02-17 15:12:36 -08:00
Howard Zhang 2578fc5ef4 enable integrationtest image on MultiArch
Signed-off-by: Howard Zhang <howard.zhang@arm.com>
2022-02-10 20:20:21 +08:00