569b4df24d
The following caveats must be noted:
* Podman sets the Toolbx container's soft limit for the maximum number
of open file descriptors to the host's hard limit, which is often
greater than the host's soft limit [1].
* The ulimit(1) options -P, -T, -b, and -k don't work on Fedora 38
because the corresponding resource arguments for getrlimit(2) are
absent from the operating system. These are RLIMIT_NPTS,
RLIMIT_PTHREAD, RLIMIT_SBSIZE and RLIMIT_KQUEUES respectively.
[1] https://github.com/containers/podman/issues/17681
https://github.com/containers/toolbox/issues/213
574 lines
12 KiB
Bash
574 lines
12 KiB
Bash
# shellcheck shell=bats
|
|
#
|
|
# Copyright © 2023 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
load 'libs/bats-support/load'
|
|
load 'libs/bats-assert/load'
|
|
load 'libs/helpers'
|
|
|
|
setup() {
|
|
bats_require_minimum_version 1.7.0
|
|
_setup_environment
|
|
cleanup_containers
|
|
}
|
|
|
|
teardown() {
|
|
cleanup_containers
|
|
}
|
|
|
|
@test "ulimit: real-time non-blocking time (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -R)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -R
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: real-time non-blocking time (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -R)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -R
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: core file size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -c)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -c
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: core file size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -c)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -c
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: data segment size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -d)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -d
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: data segment size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -d)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -d
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: scheduling priority (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -e)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -e
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: scheduling priority (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -e)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -e
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: file size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -f)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -f
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: file size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -f)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -f
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of pending signals (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -i)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -i
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of pending signals (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -i)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -i
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: locked memory size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -l)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -l
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: locked memory size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -l)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -l
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: resident memory size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -m)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -m
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: resident memory size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -m)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -m
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of open files (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -n)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -n
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of open files (soft)" {
|
|
local limit
|
|
limit=$(ulimit -H -n)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -n
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: pipe size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -p)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -p
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: pipe size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -p)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -p
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: POSIX message queue size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -q)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -q
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: POSIX message queue size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -q)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -q
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: real-time scheduling priority (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -r)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -r
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: real-time scheduling priority (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -r)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -r
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: stack size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -s)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -s
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: stack size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -s)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -s
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: CPU time (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -t)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -t
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: CPU time (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -t)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -t
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of user processes (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -u)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -u
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of user processes (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -u)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -u
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: virtual memory size (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -v)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -v
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: virtual memory size (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -v)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -v
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of file locks (hard)" {
|
|
local limit
|
|
limit=$(ulimit -H -x)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -H -x
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|
|
|
|
@test "ulimit: number of file locks (soft)" {
|
|
local limit
|
|
limit=$(ulimit -S -x)
|
|
|
|
create_default_container
|
|
|
|
run --keep-empty-lines --separate-stderr "$TOOLBOX" run ulimit -S -x
|
|
|
|
assert_success
|
|
assert_line --index 0 "$limit"
|
|
assert [ ${#lines[@]} -eq 2 ]
|
|
|
|
# shellcheck disable=SC2154
|
|
assert [ ${#stderr_lines[@]} -eq 0 ]
|
|
}
|