mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-22 09:39:13 +00:00
7f0f07599a
Python 3.12 includes a few breaking changes, such as the removal of the distutils module [1] and the deprecation of `setup.py install` in favour of pip install [2]. This patch updates the installation script for crit to reflect these changes by replacing the use of `setup.py install` with `pip install` and `distutils` with `setuptools`. In addition, a minimal pyproject.toml file has been added as it is required by the new version of pip [3]. It is worth noting that with this change we are switching from the egg packaging format to wheel [4] and add pip as a build dependency. [1] https://www.python.org/downloads/release/python-3120a2/ [2] https://github.com/pypa/setuptools/pull/2824 [3] https://pip.pypa.io/en/stable/reference/build-system/pyproject-toml/ [4] https://packaging.python.org/en/latest/discussions/wheel-vs-egg/ Signed-off-by: Radostin Stoyanov <rstoyanov@fedoraproject.org>
88 lines
4.5 KiB
Bash
Executable file
88 lines
4.5 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# This script is used to run vagrant based tests on Cirrus CI.
|
|
# This script is started via .cirrus.yml
|
|
|
|
set -e
|
|
set -x
|
|
|
|
VAGRANT_VERSION=2.2.19
|
|
FEDORA_VERSION=37
|
|
FEDORA_BOX_VERSION=37.20221105.0
|
|
|
|
setup() {
|
|
if [ -n "$TRAVIS" ]; then
|
|
# Load the kvm modules for vagrant to use qemu
|
|
modprobe kvm kvm_intel
|
|
fi
|
|
|
|
# Tar up the git checkout to have vagrant rsync it to the VM
|
|
tar cf criu.tar ../../../criu
|
|
# Cirrus has problems with the following certificate.
|
|
wget --no-check-certificate https://releases.hashicorp.com/vagrant/${VAGRANT_VERSION}/vagrant_${VAGRANT_VERSION}_"$(uname -m)".deb -O /tmp/vagrant.deb && \
|
|
dpkg -i /tmp/vagrant.deb
|
|
|
|
./apt-install libvirt-clients libvirt-daemon-system libvirt-dev qemu-utils qemu \
|
|
ruby build-essential libxml2-dev qemu-kvm rsync ebtables dnsmasq-base \
|
|
openssh-client
|
|
systemctl restart libvirtd
|
|
vagrant plugin install vagrant-libvirt
|
|
vagrant init fedora/${FEDORA_VERSION}-cloud-base --box-version ${FEDORA_BOX_VERSION}
|
|
# The default libvirt Vagrant VM uses 512MB.
|
|
# Travis VMs should have around 7.5GB.
|
|
# Increasing it to 4GB should work.
|
|
sed -i Vagrantfile -e 's,^end$, config.vm.provider :libvirt do |libvirt|'"\n"' libvirt.memory = 4096;end'"\n"'end,g'
|
|
vagrant up --provider=libvirt --no-tty
|
|
mkdir -p /root/.ssh
|
|
vagrant ssh-config >> /root/.ssh/config
|
|
ssh default sudo dnf upgrade -y
|
|
ssh default sudo dnf install -y gcc git gnutls-devel nftables-devel libaio-devel \
|
|
libasan libcap-devel libnet-devel libnl3-devel libbsd-devel make protobuf-c-devel \
|
|
protobuf-devel python3-flake8 python3-future python3-protobuf python3-importlib-metadata \
|
|
python3-junit_xml rubygem-asciidoctor iptables libselinux-devel libbpf-devel
|
|
# Disable sssd to avoid zdtm test failures in pty04 due to sssd socket
|
|
ssh default sudo systemctl mask sssd
|
|
ssh default cat /proc/cmdline
|
|
}
|
|
|
|
fedora-no-vdso() {
|
|
ssh default sudo grubby --update-kernel ALL --args="vdso=0"
|
|
vagrant reload
|
|
ssh default cat /proc/cmdline
|
|
ssh default 'cd /vagrant; tar xf criu.tar; cd criu; make -j 4'
|
|
ssh default 'cd /vagrant/criu/test; sudo ./zdtm.py run -a --keep-going'
|
|
# This test (pidfd_store_sk) requires pidfd_getfd syscall which is guaranteed in Fedora 33.
|
|
# It is also skipped from -a because it runs in RPC mode only
|
|
ssh default 'cd /vagrant/criu/test; sudo ./zdtm.py run -t zdtm/transition/pidfd_store_sk --rpc --pre 2'
|
|
}
|
|
|
|
fedora-rawhide() {
|
|
#
|
|
# Workaround the problem:
|
|
# error running container: error from /usr/bin/crun creating container for [...]: sd-bus call: Transport endpoint is not connected
|
|
# Let's just use runc instead of crun
|
|
# see also https://github.com/kata-containers/tests/issues/4283
|
|
#
|
|
ssh default 'sudo dnf remove -y crun || true'
|
|
ssh default sudo dnf install -y podman runc
|
|
ssh default 'cd /vagrant; tar xf criu.tar; cd criu; sudo -E make -C scripts/ci fedora-rawhide CONTAINER_RUNTIME=podman BUILD_OPTIONS="--security-opt seccomp=unconfined"'
|
|
}
|
|
|
|
fedora-non-root() {
|
|
ssh default uname -a
|
|
ssh default 'cd /vagrant; tar xf criu.tar; cd criu; make -j 4'
|
|
# Setting the capability should be the only line needed to run as non-root on Fedora
|
|
# In other environments either set /proc/sys/kernel/yama/ptrace_scope to 0 or grant cap_sys_ptrace to criu
|
|
ssh default 'sudo setcap cap_checkpoint_restore+eip /vagrant/criu/criu/criu'
|
|
# Run it once as non-root
|
|
ssh default 'cd /vagrant/criu; criu/criu check --unprivileged; ./test/zdtm.py run -t zdtm/static/env00 -t zdtm/static/pthread00 -f h --rootless'
|
|
# Run it as root with '--rootless'
|
|
ssh default 'cd /vagrant/criu; sudo ./test/zdtm.py run -t zdtm/static/env00 -t zdtm/static/pthread00 -f h; sudo chmod 777 test/dump/zdtm/static/{env00,pthread00}; sudo ./test/zdtm.py run -t zdtm/static/env00 -t zdtm/static/pthread00 -f h --rootless'
|
|
# Run it as non-root in a user namespace. Since CAP_CHECKPOINT_RESTORE behaves differently in non-user namespaces (e.g. no access to map_files) this tests that we can dump and restore
|
|
# under those conditions. Note that the "... && true" part is necessary; we need at least one statement after the tests so that bash can reap zombies in the user namespace,
|
|
# otherwise it will exec the last statement and get replaced and nobody will be left to reap our zombies.
|
|
# Note: selinux in Enforcing mode prevents us from calling clone3() or writing to ns_last_pid on restore; hence set to Permissive for the test and then set back.
|
|
ssh default 'cd /vagrant/criu; selinuxmode=`getenforce` && sudo setenforce Permissive && unshare -Ucfpm --mount-proc bash -c "./test/zdtm.py run -t zdtm/static/maps00 -f h --rootless && true" && sudo setenforce $selinuxmode'
|
|
}
|
|
|
|
$1
|