
This issue was caused by a race between init exits and new exec process tracking inside the shim. The test operates by controlling the time between when the shim invokes "runc exec" and when the actual "runc exec" is triggered. This allows validating that races for shim state tracking between pre- and post-start of the exec process do not exist. Relates to https://github.com/containerd/containerd/issues/10589 Signed-off-by: Samuel Karp <samuelkarp@google.com>
111 lines
2.7 KiB
Go
111 lines
2.7 KiB
Go
//go:build linux
|
|
|
|
/*
|
|
Copyright The containerd Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
"os/exec"
|
|
"syscall"
|
|
|
|
"github.com/sirupsen/logrus"
|
|
|
|
"github.com/containerd/containerd/v2/pkg/oci"
|
|
)
|
|
|
|
const (
|
|
failpointProfileKey = "oci.runc.failpoint.profile"
|
|
)
|
|
|
|
type invoker func(context.Context) error
|
|
|
|
type invokerInterceptor func(context.Context, invoker) error
|
|
|
|
var (
|
|
failpointProfiles = map[string]invokerInterceptor{
|
|
"issue9103": issue9103KillInitAfterCreate,
|
|
"delayExec": delayExec,
|
|
}
|
|
)
|
|
|
|
// setupLog setups messages into log file.
|
|
func setupLog() {
|
|
// containerd/go-runc always add --log option
|
|
idx := 2
|
|
for ; idx < len(os.Args); idx++ {
|
|
if os.Args[idx] == "--log" {
|
|
break
|
|
}
|
|
}
|
|
|
|
if idx >= len(os.Args)-1 || os.Args[idx] != "--log" {
|
|
panic("option --log required")
|
|
}
|
|
|
|
logFile := os.Args[idx+1]
|
|
f, err := os.OpenFile(logFile, os.O_CREATE|os.O_WRONLY|os.O_APPEND|os.O_SYNC, 0o644)
|
|
if err != nil {
|
|
panic(fmt.Errorf("failed to open %s: %w", logFile, err))
|
|
}
|
|
|
|
logrus.SetOutput(f)
|
|
logrus.SetFormatter(new(logrus.JSONFormatter))
|
|
}
|
|
|
|
func main() {
|
|
setupLog()
|
|
|
|
fpProfile, err := failpointProfileFromOCIAnnotation()
|
|
if err != nil {
|
|
logrus.WithError(err).Fatal("failed to get failpoint profile")
|
|
}
|
|
|
|
ctx := context.Background()
|
|
if err := fpProfile(ctx, defaultRuncInvoker); err != nil {
|
|
logrus.WithError(err).Fatal("failed to exec failpoint profile")
|
|
}
|
|
}
|
|
|
|
// defaultRuncInvoker is to call the runc command with same arguments.
|
|
func defaultRuncInvoker(ctx context.Context) error {
|
|
cmd := exec.CommandContext(ctx, "runc", os.Args[1:]...)
|
|
cmd.SysProcAttr = &syscall.SysProcAttr{Pdeathsig: syscall.SIGKILL}
|
|
return cmd.Run()
|
|
}
|
|
|
|
// failpointProfileFromOCIAnnotation gets the profile from OCI annotations.
|
|
func failpointProfileFromOCIAnnotation() (invokerInterceptor, error) {
|
|
spec, err := oci.ReadSpec(oci.ConfigFilename)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to read %s: %w", oci.ConfigFilename, err)
|
|
}
|
|
|
|
profileName, ok := spec.Annotations[failpointProfileKey]
|
|
if !ok {
|
|
return nil, fmt.Errorf("failpoint profile is required")
|
|
}
|
|
|
|
fp, ok := failpointProfiles[profileName]
|
|
if !ok {
|
|
return nil, fmt.Errorf("no such failpoint profile %s", profileName)
|
|
}
|
|
return fp, nil
|
|
}
|