From patchwork Tue Nov 10 09:18:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Moessbauer, Felix" X-Patchwork-Id: 5598 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 10 Nov 2026 10:19:17 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-lf1-f58.google.com (mail-lf1-f58.google.com [209.85.167.58]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 6AA9JGee031577 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 10 Nov 2026 10:19:16 +0100 Received: by mail-lf1-f58.google.com with SMTP id 2adb3069b0e04-5c1595d5031sf221938e87.2 for ; Tue, 10 Nov 2026 01:19:16 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1794302350; cv=pass; d=google.com; s=arc-20260327; b=M3g7m/D5b6+b+9b9Kg92VeQb4E1s3wEVcjv3+gc9AgWLLvxFDd9eCndy1ptxdmFV3A vXy/lhUWL6RcSnx+rL4uNrDKvEosGzgzgprYk1FVrhEVp3e1s7pNchWaJ8ugWScY+1wQ o0AZKxEr/O1b9DseGZBqgb02Hk3wTMoXyE6ZcEW5UN+HSzIX7tzyDQ5C1kwMSAPPMe/K EIDfBXzA7KeQy12feM7J23eRGtXfu7AqMmRN8IgN1bo8NQoMpthi+oSUfYoIzy8Ar49q ZlYvv4Gb7xtMq6N0ex+LYdoMXALqiAtOYmyXsIegHDqKGaOPhOR62P6t26atfPWsmS8N UI0Q== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=YiT26rQZev2hY10Z4zhjKX5XLvtU6Nd0TbqvGI4eD6w=; fh=P4CQZ0IiI5prjd0IhLIAdJ1xx37zuFzEzsEZfC0JOAA=; b=iB/XWyLrjDnSTDrAWx+H7PIHu1be9THNHchmtOLEiONiY1Atr30i0Y/bXp2XlCjh+/ HNqXMuDfYfYgXInZj6Co3SdqZqtBX0yxtC1z16otekiOvz1U6mTKjF7mCiA12fvRiEb7 YN5z7rKab7O4XKDqnRKqT1gliKePUC0hOG263Sy3CRjnJaxynMY4lV+ZQ2pw46/T1uuI COIyr5BYBs7qO1gpZ4BtAE+Sm1d7z3qbuTRkWisOIMDB/8WZ8n9MWFzEeLRmkZ3FBJXt 9VJFWkBK1IBAQDxYNE8mclx3r98q8Dwr9TOrAqFDYKYBMLvUUXeCbU8cwMJi5S9MTrIw dRSg==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=TtgxEtCb; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20260707; t=1794302350; x=1794907150; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=YiT26rQZev2hY10Z4zhjKX5XLvtU6Nd0TbqvGI4eD6w=; b=vYBNafGkaxiKxTZNDrLXlpV0Vq+UHYk1fq88/tSHam/osbtxNfWTmulsWJ0r0eoilx Nj1iAvqRgE/4y0W6asaxCcEpXHQviI7LQpuwxeARwF2Xy39YsULmE9VZa8uoXnrJw+jF SqmfyOzSMssNbFtFcT/OJO3FJ9O4i4r/G1rICVzI9U6QEKdMkClNZXxQWkU+5Ow8OOuj Cz5aBo3gq23AmEJom0ngWGIMDfvtq3lNdEviEa+pSB9ZBKxYLmw0nQnN6kNeKJTyFc+z EfPoQXS5r+c2U5J6UJj4ucXGJPbHhi97klzI1O+mpVBYZRUWOzcvm1Xqip3GkrC6Z65x AU+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1794302350; x=1794907150; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=YiT26rQZev2hY10Z4zhjKX5XLvtU6Nd0TbqvGI4eD6w=; b=XUaVZ7TuQ5BHHI7h/xRLxeSCCwkMaeDsyFYpn+nqE5jogKKLbrd4vpkXm3Cj+0x1PJ UnAupn0EW2e2r/O9UYf5dTM288uLDzozCW+I1J4qHnKrYbf2atK4a734NJRnrnfIxcSv HppoemI815aUGMaHGvMP+YIVLDFR4bwIjErukaPWBnCJ5tZUw7LfOzgvmJmVni25VOve FBTcy1iqhYfm3IcXpb1hmJgqvd3vAtpMgYonEC446ApL1cyPEiGOoNSebGjPJoiBq9dU BmsN5GYOcVRNGpL0vC2B3nExrYT8uNCepsRpZm9iiKJ1S2wtLvfxZSUOP3K8VJS/uNn+ 7baw== X-Forwarded-Encrypted: i=3; AL+hErFDCHm3mrB5x87i8TVwIe68Rb4mypy8PEhfzsc7RwN9zoHvO91wwvBEuELPJw/WsmdO5EgeYwY=@isar-build.org X-Gm-Message-State: APuU4Z8OflFSBKxGYNa3GZkhn67VJQkt08uXgCvobBJNkTgutoE/q0Hu emnCNGMPEidx0KiffOGmziSV0G7rbboBKSCp1UEAgWLuYhbX1uHV3P2x X-Received: by 2002:a05:6512:23a4:b0:5bf:d54c:c189 with SMTP id 2adb3069b0e04-5c156e3aee5mr707597e87.5.1794302350213; Tue, 10 Nov 2026 01:19:10 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcrqpqscSsA8qq9yquqCqWTYZaXQBxdIhBxLDcVJGXYog==" Received: by 2002:ac2:43a4:0:b0:5c1:483b:995e with SMTP id 2adb3069b0e04-5c148cd52fdls966633e87.1.-pod-prod-06-eu; Tue, 10 Nov 2026 01:19:07 -0800 (PST) X-Received: by 2002:a05:6512:3196:b0:5c1:5169:7d96 with SMTP id 2adb3069b0e04-5c156e9ee69mr586475e87.18.1794302347422; Tue, 10 Nov 2026 01:19:07 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1794302347; cv=pass; d=google.com; s=arc-20260327; b=TTrNYW9lMl4pVrtPpA6j+uUtdaGFCRteRt0/zfDw9c2INLE8wE1/RQKl2T62Oqpwz6 ngfAHV6FbV2zjaTVr92aIG45QUCumdWqqpsZrJ3sFVynX/5yLTqtHgXp+9wt7T/sF6kr BDkln9ctldFsYFmrzoGKtFdRTm6eTgyyiaiSNIODTc7cSM2Qew76mZuT3a+sylOtvBfK pYKe+XilXlQ3bMXYRm2MZXWdmPzFcWuiovtlfkVCVQ/90P6ak8+OlTyJ4aG2J1Nnrtom k94inMkTLaWhd5+gxOHfapAKGrcXyFuutyoOS2IgpYSH1dNDVANR4I+1zr42po+K6RF9 n+SA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=H6c1u5NBWnu0aINuAluKwRUnCGAZUZ/W4A2na2KUeXY=; fh=U3Dk/ual+IELh9xXh8FyGMuCD/URkQkU467b6hiDtMk=; b=TDEi3E/pDez+L3+1aHE1ndGZi75VBo8naS08MoLq0oUCQEdG/VpjUSqBNWvfStl5ji 04CwglQLUJY7hTlBvA1cJvD8aMJ6O4Dbp5ly06BvJ4Ydqfhd3kvbXQSMsZHp2iiYBjoM UY0v1RJQJZBxGLzBpeIpLnJ5sI8oXWM7yzKclzGBPc6fia4OREsnAm5SMAZE8zk/Nfp+ jQTgMdLAS15WHyZJzgaEFht8w/1onl6yKnRr12/kCJYW7zDIq413p7FdHttQR50Kyx/q l3DaRtFs4rZosAoZr0rd8s6WfzsfSKYHGg4pow2lP+/wYvaO0sSNF+kBzL4v1TXOXd6p we/A==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=TtgxEtCb; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c200::5]) by gmr-mx.google.com with ESMTPS id 2adb3069b0e04-5c157bc8e34si17835e87.17.2026.11.10.01.19.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 10 Nov 2026 01:19:07 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) client-ip=2a01:111:f403:c200::5; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=sjHVowN44R4qPT74Thc3BJf7YzR2VZ1vKTqDnB4P8eIlguU60xseqllzr9QuVn/0m2k/u7LGljgspPRgWS4LbXFg7f9ot2SdyR9MDCXS4GjvOrNxnx30lfpUWpZMHrxXGcswRmnfATyCEeg67gqdEGRJGKuic6r8r1jcxD3y0mhnaMUJkQoTYUytgp577Wz/EHB1zGWF4OjCvmd/K2Y3SyrDwp5WVPW8oQ6+0ailR/p2qcoIYwdAd6WkuTWv6V2oFQYsLUOurZbNgzQkD9l+N5qVauKAFrRDXO7vs2peEyRzLzG/iiGzRZHKCcu9A/nst7yVEABi0Lzk6v3MHLOCeg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=H6c1u5NBWnu0aINuAluKwRUnCGAZUZ/W4A2na2KUeXY=; b=WYYfTLLWuaGvuTYsgwvVhRBpcKva5pJT1gXcKnpCXHF3SyNNNynW6rndLO5zBYMGGLzfXPlCpnhLX5ZOqeJu8Gs06SW2AIJnn8kZA3GXsBNSPuWWjTNeLfsv7+vVFR0xDNB1Z5jqENWHRoyrrPewACgMIozhZelm9P8ZhMHBhksNJKNF5IsXxvgEnbqmzCkPmcq+WBn+ovUZg0BFZsyP3MWiwbusZQvSBOW9pEK2LOyDKK7etblbmrb31XHYkxUoaLhIxdI3BKD1GzXDB9rpMk4Mwq/im9mKaapzceu55nyulJiCGPWG0GIL98uQclypcy78KBYpTbKaNN8jwldOcw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DB9PR10MB5377.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:336::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.8; Tue, 10 Nov 2026 09:19:05 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%3]) with mapi id 15.21.0615.007; Tue, 10 Nov 2026 09:19:05 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: "Moessbauer, Felix" To: isar-users@googlegroups.com Cc: Felix Moessbauer , Clara Kowalsky Subject: [PATCH 1/1] test-container: block sudo usage on rootless Date: Tue, 10 Nov 2026 10:18:50 +0100 Message-ID: <20261110091850.1015989-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: FR0P281CA0244.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:af::13) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DB9PR10MB5377:EE_ X-MS-Office365-Filtering-Correlation-Id: 61160621-db2f-4460-cd3d-08df3f0baaad X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|1800799024|23010399003|366016|10070799003|11063799006|261102123227099003|261021123027099003|261022105027099003|261021121427099003|56012099006|261026140227099003|261026121527099003|261102130727099003|261028144727099003|261009223027099003|10067099003|55112099003|18002099003|6133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(23010399003)(366016)(10070799003)(11063799006)(261102123227099003)(261021123027099003)(261022105027099003)(261021121427099003)(56012099006)(261026140227099003)(261026121527099003)(261102130727099003)(261028144727099003)(261009223027099003)(10067099003)(55112099003)(18002099003)(6133799003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: cDN4B8RRoh9Q0Rckl3u74GO5Xn/1Nd49HOw= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 61160621-db2f-4460-cd3d-08df3f0baaad X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Nov 2026 09:19:05.4082 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: UHiDSFQQtQQ45T3CkwNSZZ1hfbIQtl1lRfSq0ssbN6kftE5Rq5Q3Gpd0AUuWFc1HeHmh16ojq710OgJkRDBTQzTBrogHm4ln/A/godmhEPM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR10MB5377 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=TtgxEtCb; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= In rootless mode, no sudo calls must be made. However, the kas-container ships passwordless sudo which also works in the container. To catch the cases where sudo is called in rootless mode, we replace it in the container entrypoint of the test container with a stub that emits a meaningfull error message along with a non zero exit code. Tested-by: Clara Kowalsky Signed-off-by: Felix Moessbauer --- testsuite/dockerdata/test-container-entrypoint | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/testsuite/dockerdata/test-container-entrypoint b/testsuite/dockerdata/test-container-entrypoint index 49771c15..1e5aec3c 100755 --- a/testsuite/dockerdata/test-container-entrypoint +++ b/testsuite/dockerdata/test-container-entrypoint @@ -65,14 +65,16 @@ case "$args" in ;; esac +block_sudo=0 case "$args" in *"-p rootless=1"*) + block_sudo=1 ;; *) clean_rootless_files=0 ;; esac -export clean_rootless_files +export clean_rootless_files block_sudo mkdir /isar @@ -109,6 +111,19 @@ mkdir -p ${base_dir}/overlay/work sudo mount -t overlay overlay -o lowerdir=/repo,upperdir=${base_dir}/overlay/upper,workdir=${base_dir}/overlay/work /isar sudo mount -o bind ${base_dir} /isar/build +if [ "${block_sudo}" = 1 ]; then + blocker=$(mktemp) + cat < "${blocker}" +#!/bin/sh +echo "ERROR: sudo is blocked in rootless test runs: sudo \$*" >&2 +exit 1 +EOF + sudo install -m 755 -o root -g root "${blocker}" /usr/bin/sudo.blocked + rm -f "${blocker}" + # rename, as the running sudo binary cannot be overwritten in place + sudo mv -f /usr/bin/sudo.blocked /usr/bin/sudo +fi + mkdir -p "${HOME}"/.config/avocado cat < "${HOME}"/.config/avocado/avocado.conf [datadir.paths]