mirror of
https://github.com/kemko/nomad.git
synced 2026-01-06 18:35:44 +03:00
* artifact: protect against unbounded artifact decompression Starting with 1.5.0, set defaut values for artifact decompression limits. artifact.decompression_size_limit (default "100GB") - the maximum amount of data that will be decompressed before triggering an error and cancelling the operation artifact.decompression_file_count_limit (default 4096) - the maximum number of files that will be decompressed before triggering an error and cancelling the operation. * artifact: assert limits cannot be nil in validation
48 lines
1.5 KiB
Go
48 lines
1.5 KiB
Go
package getter
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
cconfig "github.com/hashicorp/nomad/client/config"
|
|
"github.com/hashicorp/nomad/helper/pointer"
|
|
"github.com/hashicorp/nomad/helper/testlog"
|
|
sconfig "github.com/hashicorp/nomad/nomad/structs/config"
|
|
"github.com/shoenig/test/must"
|
|
)
|
|
|
|
// TestSandbox creates a real artifact downloader configured via the default
|
|
// artifact config. It is good enough for tests so no mock implementation exists.
|
|
func TestSandbox(t *testing.T) *Sandbox {
|
|
defaultConfig := sconfig.DefaultArtifactConfig()
|
|
defaultConfig.DecompressionSizeLimit = pointer.Of("1MB")
|
|
defaultConfig.DecompressionFileCountLimit = pointer.Of(10)
|
|
ac, err := cconfig.ArtifactConfigFromAgent(defaultConfig)
|
|
must.NoError(t, err)
|
|
return New(ac, testlog.HCLogger(t))
|
|
}
|
|
|
|
// SetupDir creates a directory suitable for testing artifact - i.e. it is
|
|
// owned by the nobody user as would be the case in a normal client operation.
|
|
//
|
|
// returns alloc_dir, task_dir
|
|
func SetupDir(t *testing.T) (string, string) {
|
|
uid, gid := credentials()
|
|
|
|
allocDir := t.TempDir()
|
|
taskDir := filepath.Join(allocDir, "local")
|
|
topDir := filepath.Dir(allocDir)
|
|
|
|
must.NoError(t, os.Chown(topDir, int(uid), int(gid)))
|
|
must.NoError(t, os.Chmod(topDir, 0o755))
|
|
|
|
must.NoError(t, os.Chown(allocDir, int(uid), int(gid)))
|
|
must.NoError(t, os.Chmod(allocDir, 0o755))
|
|
|
|
must.NoError(t, os.Mkdir(taskDir, 0o755))
|
|
must.NoError(t, os.Chown(taskDir, int(uid), int(gid)))
|
|
must.NoError(t, os.Chmod(taskDir, 0o755))
|
|
return allocDir, taskDir
|
|
}
|