3e9b68d581
Signed-off-by: Mrunal Patel <mrunalp@gmail.com> Add tests for no-new-privileges Signed-off-by: Mrunal Patel <mrunalp@gmail.com> Update documentation for no-new-privileges Signed-off-by: Mrunal Patel <mrunalp@gmail.com> Upstream-commit: 74bb1ce9e9dbfa9dd866e84f891e865fca906d9a Component: engine
23 lines
651 B
Bash
23 lines
651 B
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
# Build a C binary for testing no-new-privileges
|
|
# and compile it for target daemon
|
|
if [ "$DOCKER_ENGINE_GOOS" = "linux" ]; then
|
|
if [ "$DOCKER_ENGINE_OSARCH" = "$DOCKER_CLIENT_OSARCH" ]; then
|
|
tmpdir=$(mktemp -d)
|
|
gcc -g -Wall -static contrib/nnp-test/nnp-test.c -o "${tmpdir}/nnp-test"
|
|
|
|
dockerfile="${tmpdir}/Dockerfile"
|
|
cat <<-EOF > "$dockerfile"
|
|
FROM debian:jessie
|
|
COPY . /usr/bin/
|
|
RUN chmod +s /usr/bin/nnp-test
|
|
EOF
|
|
docker build --force-rm ${DOCKER_BUILD_ARGS} -qt nnp-test "${tmpdir}" > /dev/null
|
|
rm -rf "${tmpdir}"
|
|
else
|
|
docker build ${DOCKER_BUILD_ARGS} -qt nnp-test contrib/nnp-test > /dev/null
|
|
fi
|
|
fi
|