build/sandbox/nsjail_test.py

# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

"""Test nsjail."""

import os
import subprocess
import tempfile
import unittest
from . import nsjail


class NsjailTest(unittest.TestCase):

  def setUp(self):
    nsjail.__file__ = '/'

  def testMinimalParameters(self):
    commands = nsjail.run(
        nsjail_bin='/bin/true',
        chroot='/chroot',
        source_dir='/source_dir',
        command=['/bin/bash'],
        build_target='target_name',
        dry_run=True)
    self.assertEqual(
        commands,
        [
            '/bin/true',
            '--env', 'USER=nobody',
            '--config', '/nsjail.cfg',
            '--bindmount', '/source_dir:/src',
            '--', '/bin/bash'
        ]
    )

  def testSetBadMetaAndroidDir(self):
    os.chdir('/')
    with self.assertRaises(ValueError):
      commands = nsjail.run(
        nsjail_bin='/bin/true',
        chroot='/chroot',
        source_dir='/source_dir',
        command=['/bin/bash'],
        build_target='target_name',
        dry_run=True,
        meta_root_dir='/meta/dir',
        meta_android_dir='/android/dir')

  def testRedirectStdout(self):
    with tempfile.TemporaryFile('w+t') as out:
      nsjail.run(
          nsjail_bin='/bin/echo',
          chroot='/chroot',
          source_dir='/source_dir',
          command=['/bin/bash'],
          build_target='target_name',
          stdout=out)
      out.seek(0)
      stdout = out.read()
      args = ('--env USER=nobody --config /nsjail.cfg '
              '--bindmount /source_dir:/src -- /bin/bash')
      expected = '\n'.join([args, 'NsJail command:', '/bin/echo '+args])+'\n'
      self.assertEqual(stdout, expected)

  def testFailingJailedCommand(self):
    with self.assertRaises(subprocess.CalledProcessError):
      nsjail.run(
          nsjail_bin='/bin/false',
          chroot='/chroot',
          source_dir='/source_dir',
          command=['/bin/bash'],
          build_target='target_name')

  def testDist(self):
    commands = nsjail.run(
        nsjail_bin='/bin/true',
        chroot='/chroot',
        source_dir='/source_dir',
        command=['/bin/bash'],
        build_target='target_name',
        dist_dir='/dist_dir',
        dry_run=True)
    self.assertEqual(
        commands,
        [
            '/bin/true',
            '--env', 'USER=nobody',
            '--config', '/nsjail.cfg',
            '--env', 'DIST_DIR=/dist',
            '--bindmount', '/source_dir:/src',
            '--bindmount', '/dist_dir:/dist',
            '--', '/bin/bash'
        ]
    )

  def testBuildID(self):
    commands = nsjail.run(
        nsjail_bin='/bin/true',
        chroot='/chroot',
        source_dir='/source_dir',
        command=['/bin/bash'],
        build_target='target_name',
        build_id='0',
        dry_run=True)
    self.assertEqual(
        commands,
        [
            '/bin/true',
            '--env', 'USER=nobody',
            '--config', '/nsjail.cfg',
            '--env', 'BUILD_NUMBER=0',
            '--bindmount', '/source_dir:/src',
            '--', '/bin/bash'
        ]
    )

  def testMaxCPU(self):
    commands = nsjail.run(
        nsjail_bin='/bin/true',
        chroot='/chroot',
        source_dir='/source_dir',
        command=['/bin/bash'],
        build_target='target_name',
        max_cpus=1,
        dry_run=True)
    self.assertEqual(
        commands,
        [
            '/bin/true',
            '--env', 'USER=nobody',
            '--config', '/nsjail.cfg',
            '--max_cpus=1',
            '--bindmount', '/source_dir:/src',
            '--', '/bin/bash'
        ]
    )

  def testEnv(self):
    commands = nsjail.run(
        nsjail_bin='/bin/true',
        chroot='/chroot',
        source_dir='/source_dir',
        command=['/bin/bash'],
        build_target='target_name',
        max_cpus=1,
        dry_run=True,
        env=['foo=bar', 'spam=eggs'])
    self.assertEqual(
        commands,
        [
            '/bin/true',
            '--env', 'USER=nobody',
            '--config', '/nsjail.cfg',
            '--max_cpus=1',
            '--bindmount', '/source_dir:/src',
            '--env', 'foo=bar', '--env', 'spam=eggs',
            '--', '/bin/bash'
        ]
    )


if __name__ == '__main__':
  unittest.main()