spiegel_podman/test/e2e
Valentin Rothberg f3f4c54f2a policy for seccomp-profile selection
Implement a policy for selecting a seccomp profile.  In addition to the
default behaviour (default profile unless --security-opt seccomp is set)
add a second policy doing a lookup in the image annotation.

If the image has the "io.containers.seccomp.profile" set its value will be
interpreted as a seccomp profile.  The policy can be selected via the
new --seccomp-policy CLI flag.

Once the containers.conf support is merged into libpod, we can add an
option there as well.

Note that this feature is marked as experimental and may change in the
future.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2020-01-09 17:57:58 +01:00
..
build Add new test suite for build 2019-11-16 19:19:49 -05:00
hooks Add hooks support to podman 2018-04-05 14:13:49 +00:00
attach_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
build_test.go Add new test suite for build 2019-11-16 19:19:49 -05:00
checkpoint_test.go Correctly export the root file-system changes 2019-12-09 13:29:36 +01:00
commit_test.go Merge pull request #3081 from baude/remotecommit 2019-06-03 20:58:13 +02:00
common_test.go play kube: handle seccomp labels 2019-11-18 10:11:35 -05:00
config.go policy for seccomp-profile selection 2020-01-09 17:57:58 +01:00
config_amd64.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
config_ppc64le.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
container_inspect_test.go Add ContainerManager annotation to created containers 2019-09-10 09:37:14 +02:00
cp_test.go fix bug copy from container directory 2020-01-02 00:53:02 -05:00
create_staticip_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
create_staticmac_test.go test: add tests for --mac-address 2019-11-07 18:38:02 +01:00
create_test.go build(deps): bump github.com/containers/image/v5 from 5.0.0 to 5.1.0 2019-12-20 09:30:47 -05:00
diff_test.go Add --latest, -l to 'podman diff' 2019-06-21 13:37:04 +02:00
events_test.go podman events format json 2019-08-02 11:47:43 -04:00
exec_test.go Processes execed into container should match container label 2019-10-29 16:05:42 -04:00
exists_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
export_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
generate_kube_test.go Add support for RunAsUser and RunAsGroup 2019-11-06 10:35:37 -05:00
generate_systemd_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
healthcheck_run_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
history_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
images_test.go history: rewrite mappings 2019-11-12 17:29:30 -05:00
import_test.go Completely rework --change parsing 2019-12-04 18:55:30 -05:00
info_test.go Fix podman-remote info to show registry data 2020-01-07 19:38:46 -05:00
init_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
inspect_test.go Ensure SizeRw is shown when a user does 'inspect --size -t container'. 2019-12-27 23:49:34 +01:00
kill_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
libpod_suite_remoteclient_test.go Move noCache logic lower in stack 2019-09-26 10:56:24 -04:00
libpod_suite_test.go Add podman system reset command 2019-11-29 05:34:52 -05:00
load_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
login_logout_test.go fix bug check nonexist authfile 2019-11-05 21:32:18 -05:00
logs_test.go logs: support --tail 0 2019-10-31 19:55:36 +01:00
mount_test.go add list mount tests 2019-09-24 11:01:28 +02:00
namespace_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
negative_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
network_create_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
network_test.go inclusion of podman network 2019-08-15 12:49:12 -05:00
pause_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
play_kube_test.go play kube: make seccomp handling better conform to k8s 2020-01-03 13:27:17 -05:00
pod_create_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
pod_infra_container_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
pod_inspect_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
pod_kill_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
pod_pause_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
pod_pod_namespaces.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
pod_prune_test.go Remove containers when pruning a stopped pod. 2019-11-26 13:19:31 -05:00
pod_ps_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
pod_restart_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
pod_rm_test.go Remove containers when pruning a stopped pod. 2019-11-26 13:19:31 -05:00
pod_start_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
pod_stats_test.go rootless: enable stats test on cgroup v2 2019-12-04 13:11:58 +01:00
pod_stop_test.go podman {pod,} rm/stop: add --ignore flag 2019-11-25 09:48:13 +01:00
pod_top_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
port_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
prune_test.go filter added to container prune command 2019-11-29 15:28:55 +09:00
ps_test.go Merge pull request #4748 from NevilleC/nc-podname 2019-12-29 12:16:43 +01:00
pull_test.go use pause image for check all 2019-11-14 12:58:16 -06:00
push_test.go build: drop support for ostree 2019-10-30 11:28:10 +01:00
restart_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
rm_test.go podman {pod,} rm/stop: add --ignore flag 2019-11-25 09:48:13 +01:00
rmi_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
run_cgroup_parent_test.go namespaces: by default create cgroupns on cgroups v2 2019-11-05 17:29:01 +01:00
run_cleanup_test.go fix unit test to use Expect 2019-09-12 21:01:43 +00:00
run_cpu_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
run_device_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
run_dns_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
run_entrypoint_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
run_exit_test.go Fix exit code failure 2019-09-17 12:01:02 -04:00
run_memory_test.go tests: enable memory tests for cgroups v2 2019-08-13 21:43:37 +02:00
run_networking_test.go Allow --ip and --mac to be set when joining a CNI net 2019-11-26 09:56:14 -05:00
run_ns_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
run_passwd_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
run_privileged_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
run_restart_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
run_seccomp.go policy for seccomp-profile selection 2020-01-09 17:57:58 +01:00
run_selinux_test.go Fix selinux test for exec 2019-10-31 08:38:56 -04:00
run_signal_test.go Fix sig-proxy=false test and use image cache 2019-10-22 16:17:29 -04:00
run_staticip_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
run_test.go play kube: handle seccomp labels 2019-11-18 10:11:35 -05:00
run_userns_test.go podman: support --userns=ns|container 2019-07-25 23:04:55 +02:00
run_volume_test.go mount: add new options nocopyup|copyup for tmpfs 2019-11-07 18:24:02 +01:00
runlabel_test.go fix bug check nonexist authfile 2019-11-05 21:32:18 -05:00
save_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
search_test.go fix bug check nonexist authfile 2019-11-05 21:32:18 -05:00
start_test.go container start: fix regression when using name 2019-10-31 14:24:41 +01:00
stats_test.go rootless: enable stats test on cgroup v2 2019-12-04 13:11:58 +01:00
stop_test.go podman {pod,} rm/stop: add --ignore flag 2019-11-25 09:48:13 +01:00
system_df_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
system_reset_test.go Add podman system reset command 2019-11-29 05:34:52 -05:00
systemd_test.go systemd: expect full path /usr/sbin/init 2019-10-09 23:38:45 +02:00
tag_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
test.yaml Add support for RunAsUser and RunAsGroup 2019-11-06 10:35:37 -05:00
top_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
tree_test.go speed up rootless tests 2019-07-08 12:31:31 -05:00
trust_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
unshare_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
untag_test.go Add untag sub-command 2020-01-08 10:06:10 +01:00
version_test.go Fix podman-remote version to print client and server 2019-12-02 15:50:00 +01:00
volume_create_test.go Add parsing for UID, GID in volume "o" option 2019-10-22 14:32:54 -04:00
volume_inspect_test.go Show volume options in 'volume inspect' 2019-10-18 13:42:31 -04:00
volume_ls_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
volume_prune_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00
volume_rm_test.go Refactor tests when checking for error exit codes 2019-10-16 08:10:07 -07:00
wait_test.go use imagecaches for local tests 2019-05-29 15:12:05 -05:00