mirror of
https://github.com/siderolabs/talos.git
synced 2025-10-10 23:21:34 +02:00
b3c3ef29bd
Fixes #4815 This implements the following steps: * machine configuration updates * pulling and unpacking system extension images * validating, listing system extensions * re-packing system extensions * preserving installed extensions in `/etc/extensions.yaml` Once extension is enabled, raw information can be queried with: ``` $ talosctl -n 172.20.0.2 cat /etc/extensions.yaml layers: - image: 000.ghcr.io-smira-gvisor-c927b54-dirty.sqsh metadata: name: gvisor version: 20220117.0-v1.0.0 author: Andrew Rynhard description: | This system extension provides gVisor using containerd's runtime handler. compatibility: talos: version: '> v0.15.0-alpha.1' ``` This was tested with the `gvisor` system extension. Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
93 lines
2.0 KiB
Go
93 lines
2.0 KiB
Go
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package extensions_test
|
|
|
|
import (
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/talos-systems/talos/internal/pkg/extensions"
|
|
"github.com/talos-systems/talos/pkg/version"
|
|
)
|
|
|
|
func TestLoadValidateCompress(t *testing.T) {
|
|
ext, err := extensions.Load("testdata/good/extension1")
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "gvisor", ext.Manifest.Metadata.Name)
|
|
|
|
// override Talos version to make it predictable
|
|
oldVersion := version.Tag
|
|
version.Tag = "v1.0.0"
|
|
|
|
t.Cleanup(func() {
|
|
version.Tag = oldVersion
|
|
})
|
|
|
|
assert.NoError(t, ext.Validate())
|
|
|
|
dest := t.TempDir()
|
|
_, err = ext.Compress(dest)
|
|
|
|
assert.NoError(t, err)
|
|
}
|
|
|
|
func TestValidateFailures(t *testing.T) {
|
|
// override Talos version to make it predictable
|
|
oldVersion := version.Tag
|
|
version.Tag = "v1.0.0"
|
|
|
|
t.Cleanup(func() {
|
|
version.Tag = oldVersion
|
|
})
|
|
|
|
for _, tt := range []struct {
|
|
name string
|
|
loadError string
|
|
validateError string
|
|
}{
|
|
{
|
|
name: "wrongfiles",
|
|
loadError: "unexpected file \"a\"",
|
|
},
|
|
{
|
|
name: "emptymanifest",
|
|
loadError: "unsupported manifest version: \"\"",
|
|
},
|
|
{
|
|
name: "norootfs",
|
|
loadError: "extension rootfs is missing",
|
|
},
|
|
{
|
|
name: "symlinks",
|
|
validateError: "symlinks are not allowed: \"/usr/local/b\"",
|
|
},
|
|
{
|
|
name: "badpaths",
|
|
validateError: "path \"/boot/vmlinuz\" is not allowed in extensions",
|
|
},
|
|
} {
|
|
tt := tt
|
|
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
ext, err := extensions.Load(filepath.Join("testdata/bad", tt.name))
|
|
|
|
if tt.loadError == "" {
|
|
require.NoError(t, err)
|
|
} else {
|
|
assert.EqualError(t, err, tt.loadError)
|
|
}
|
|
|
|
if err == nil {
|
|
err = ext.Validate()
|
|
assert.EqualError(t, err, tt.validateError)
|
|
}
|
|
})
|
|
}
|
|
}
|