Skip to content

Commit 426f3d0

Browse files
committed
language based test segregation
1 parent 39592b5 commit 426f3d0

4 files changed

Lines changed: 725 additions & 80 deletions

File tree

Lines changed: 11 additions & 80 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
name: Integration Tests
1+
name: C Integration Tests
22

33
on:
44
push:
@@ -28,7 +28,7 @@ jobs:
2828
- name: Run filesystem isolation subtest
2929
env:
3030
ENABLE_QUEUE: "false"
31-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/file privacy across request IDs' ./...
31+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^file privacy across request IDs$' ./...
3232

3333
test-disk-cleanup:
3434
name: "Security: Disk Cleanup (Storage Exhaustion)"
@@ -51,7 +51,7 @@ jobs:
5151
- name: Run disk cleanup subtest
5252
env:
5353
ENABLE_QUEUE: "false"
54-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/disk spammer is terminated and data is reclaimed' ./...
54+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^disk spammer is terminated and data is reclaimed$' ./...
5555

5656
test-fork-bomb:
5757
name: "Resource: Fork Bomb Containment"
@@ -74,7 +74,7 @@ jobs:
7474
- name: Run fork bomb subtest
7575
env:
7676
ENABLE_QUEUE: "false"
77-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/fork bomb does not poison subsequent requests' ./...
77+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^fork bomb does not poison subsequent requests$' ./...
7878

7979
test-network-isolation:
8080
name: "Security: Network Namespace (Localhost Bridge)"
@@ -97,7 +97,7 @@ jobs:
9797
- name: Run network isolation subtest
9898
env:
9999
ENABLE_QUEUE: "false"
100-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/network namespace blocks localhost bridge' ./...
100+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^network namespace blocks localhost bridge$' ./...
101101

102102
test-memory-oom:
103103
name: "Security: Memory Limit (Hard OOM)"
@@ -120,7 +120,7 @@ jobs:
120120
- name: Run memory OOM subtest
121121
env:
122122
ENABLE_QUEUE: "false"
123-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/memory hard limit triggers oom kill' ./...
123+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^memory hard limit triggers oom kill$' ./...
124124

125125
test-io-flood:
126126
name: "Resilience: I/O Flood (Bounded Stderr)"
@@ -143,7 +143,7 @@ jobs:
143143
- name: Run I/O flood resilience subtest
144144
env:
145145
ENABLE_QUEUE: "false"
146-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/io flood is bounded and returns before timeout' ./...
146+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^io flood is bounded and returns before timeout$' ./...
147147

148148
test-signal-trap:
149149
name: "Resilience: Signal Trap Uses SIGKILL Timeout"
@@ -166,7 +166,7 @@ jobs:
166166
- name: Run signal trap resilience subtest
167167
env:
168168
ENABLE_QUEUE: "false"
169-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/signal trap cannot survive forced timeout' ./...
169+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^signal trap cannot survive forced timeout$' ./...
170170

171171
test-orphan-reaping:
172172
name: "Resilience: Orphan Grandchild Reaping"
@@ -189,7 +189,7 @@ jobs:
189189
- name: Run orphan reaping resilience subtest
190190
env:
191191
ENABLE_QUEUE: "false"
192-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/orphan grandchild is reaped after request exits' ./...
192+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^orphan grandchild is reaped after request exits$' ./...
193193

194194
test-inode-exhaustion:
195195
name: "Resilience: Inode Exhaustion Safety"
@@ -212,7 +212,7 @@ jobs:
212212
- name: Run inode exhaustion resilience subtest
213213
env:
214214
ENABLE_QUEUE: "false"
215-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/inode bomb does not poison host temp filesystem' ./...
215+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^inode bomb does not poison host temp filesystem$' ./...
216216

217217
test-privileged-syscall:
218218
name: "Resilience: Privileged Syscall Denial"
@@ -235,73 +235,4 @@ jobs:
235235
- name: Run privileged syscall denial subtest
236236
env:
237237
ENABLE_QUEUE: "false"
238-
run: sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/privileged reboot syscall is denied' ./...
239-
240-
test-python3-suite:
241-
name: "Language Gap: Python3 Security/Resilience Suite (Expected Fail)"
242-
runs-on: ubuntu-latest
243-
244-
steps:
245-
- name: Checkout
246-
uses: actions/checkout@v4
247-
248-
- name: Setup Go
249-
uses: actions/setup-go@v5
250-
with:
251-
go-version-file: go.mod
252-
253-
- name: Install native dependencies
254-
run: |
255-
sudo apt-get update
256-
sudo apt-get install -y gcc libc6-dev python3
257-
258-
- name: Run Python3 mirrored suite
259-
env:
260-
ENABLE_QUEUE: "false"
261-
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$' ./...
262-
263-
test-cpp-suite:
264-
name: "Language Gap: C++ Security/Resilience Suite (Expected Fail)"
265-
runs-on: ubuntu-latest
266-
267-
steps:
268-
- name: Checkout
269-
uses: actions/checkout@v4
270-
271-
- name: Setup Go
272-
uses: actions/setup-go@v5
273-
with:
274-
go-version-file: go.mod
275-
276-
- name: Install native dependencies
277-
run: |
278-
sudo apt-get update
279-
sudo apt-get install -y gcc g++ libc6-dev
280-
281-
- name: Run C++ mirrored suite
282-
env:
283-
ENABLE_QUEUE: "false"
284-
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$' ./...
285-
286-
test-java-suite:
287-
name: "Language Gap: Java Security/Resilience Suite (Expected Fail)"
288-
runs-on: ubuntu-latest
289-
290-
steps:
291-
- name: Checkout
292-
uses: actions/checkout@v4
293-
294-
- name: Setup Go
295-
uses: actions/setup-go@v5
296-
with:
297-
go-version-file: go.mod
298-
299-
- name: Install native dependencies
300-
run: |
301-
sudo apt-get update
302-
sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
303-
304-
- name: Run Java mirrored suite
305-
env:
306-
ENABLE_QUEUE: "false"
307-
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$' ./...
238+
run: sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^privileged reboot syscall is denied$' ./...

0 commit comments

Comments
 (0)