Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-19 09:40:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(agentcompat): probe credential execution support

Browse Source 
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
This commit is contained in:
naiba
2026-07-20 14:15:10 +00:00
co-authored by naiba/CloudCode
parent dcab0d2245
commit 589b06b63d
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integration/agentcompat/internal/process/supervisor_test.go
+12 -1
View File
@@ -41,11 +41,22 @@ func TestSupervisor_RunsChildWithConfiguredCredential(t *testing.T) {
requireNoError(t, err) requireNoError(t, err)
executablePath := filepath.Join(credentialDirectory, "process-helper") executablePath := filepath.Join(credentialDirectory, "process-helper")
requireNoError(t, os.WriteFile(executablePath, testBinary, 0o755)) requireNoError(t, os.WriteFile(executablePath, testBinary, 0o755))
uncredentialed := newHelperSupervisor(t.Context(), "credential", []string{helperMarkerEnv + "=" + marker})
uncredentialed.spec.Path = executablePath
requireNoError(t, uncredentialed.Start())
requireNoError(t, uncredentialed.Wait(t.Context()))
requireNoError(t, os.Remove(marker))
supervisor.spec.Path = executablePath supervisor.spec.Path = executablePath
supervisor.spec.Credential = &syscall.Credential{Uid: 65534, Gid: 65534} supervisor.spec.Credential = &syscall.Credential{Uid: 65534, Gid: 65534}
// When // When
requireNoError(t, supervisor.Start()) if err := supervisor.Start(); err != nil {
if errors.Is(err, syscall.EPERM) {
t.Skipf("credentialed helper execution is not permitted: %v", err)
}
t.Fatalf("start credentialed helper: %v", err)
}
requireNoError(t, supervisor.Wait(t.Context())) requireNoError(t, supervisor.Wait(t.Context()))
// Then // Then