summaryrefslogtreecommitdiffstats
path: root/tests/root-without-cap-sys-admin
blob: 419f7b3593f390a3baa6fb009966c23675a6d660 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
#!/bin/sh
set -eu
export LC_ALL=C.UTF-8
[ "$(whoami)" = "root" ]

if grep --null-data --quiet --no-messages '^container=lxc$' /proc/1/environ; then
	# see https://stackoverflow.com/questions/65748254/
	echo "cannot run under lxc -- Skipping test..." >&2
	exit 0
fi

capsh --drop=cap_sys_admin -- -c 'exec "$@"' exec \
	{{ CMD }} --mode=root --variant=apt \
	--customize-hook='chroot "$1" sh -c "test ! -e /proc/self/fd"' \
	{{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
rm /tmp/debian-chroot.tar