> On Sept. 8, 2016, 11:12 a.m., Jay Guo wrote: > > src/tests/containerizer/isolator_tests.cpp, line 1802 > > <https://reviews.apache.org/r/50271/diff/7/?file=1493023#file1493023line1802> > > > > I think we need more comprehensive tests for all the cases listed in > > the matrix in design doc. For instance, a test case for forbidden > > operations. > > Benjamin Bannier wrote: > Agreed, I'll add a parameterized test capturing that matrix.
Marking this one as fixed since I added a number of tests (almost everything modulo tests for agents with `uid != 0`). - Benjamin ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/50271/#review148162 ----------------------------------------------------------- On Sept. 13, 2016, 1:52 p.m., Benjamin Bannier wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/50271/ > ----------------------------------------------------------- > > (Updated Sept. 13, 2016, 1:52 p.m.) > > > Review request for mesos, Jay Guo and Jie Yu. > > > Bugs: MESOS-5275 > https://issues.apache.org/jira/browse/MESOS-5275 > > > Repository: mesos > > > Description > ------- > > This isolator evaluates agent allowed capabilities and passes net > capabilities on to `mesos-containerizer` which enforces the > capabilities. > > Capability information is passed via a new field in > `ContainerLaunchInfo`. > > > Diffs > ----- > > include/mesos/slave/containerizer.proto > 20db010ea158a813034b411111ce9cddac7d8317 > src/CMakeLists.txt 01ef494f7120156de3b826d7def76fb30bcc61b5 > src/Makefile.am 2dd7913a1477f3c3560be4e2c1450b93fb3afc78 > src/slave/containerizer/mesos/containerizer.cpp > 1a120f191e4ff0e2b31dd0a9a6bced784a56612c > src/slave/containerizer/mesos/isolators/linux/capabilities.hpp PRE-CREATION > src/slave/containerizer/mesos/isolators/linux/capabilities.cpp PRE-CREATION > src/tests/containerizer/isolator_tests.cpp > f8056ca08029feed5f164d4f94e24d521183bdfc > > Diff: https://reviews.apache.org/r/50271/diff/ > > > Testing > ------- > > `make check` and `sudo make check` (Debian jessie, gcc-4.9.2, w/o > optimizations) > > > Thanks, > > Benjamin Bannier > >
