This file is indexed.

/usr/bin/lxc-test-ubuntu is in lxc-tests 1.0.10-0ubuntu1.1.

This file is owned by root:root, with mode 0o755.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
#!/bin/sh

# lxc-test-ubuntu: some tests of ubuntu-specific features of lxc.
# Some features of lxc - networking and LSM configuration for instance -
# are generally configured by the distro packages.  This program
# tests the Ubuntu configuration.

# These require the ubuntu lxc package to be installed.

# General lxc functionality testing does not belong here.

# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.

# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# Lesser General Public License for more details.

# You should have received a copy of the GNU Lesser General Public
# License along with this library; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA

set -e

FAIL() {
	echo -n "Failed " >&2
	echo "$*" >&2
	exit 1
}

# Only run on a normally configured ubuntu lxc system
if [ ! -d /sys/class/net/lxcbr0 ]; then
	echo "lxcbr0 is not configured."
	exit 1
fi
if [ "$(id -u)" != "0" ]; then
	echo "ERROR: Must run as root."
	exit 1
fi

for template in ubuntu ubuntu-cloud; do
	# need a different name for each container so dnsmasq doesn't
	# mess us up with its caching
	if which uuidgen 2>&1 > /dev/null; then
		name=$(uuidgen)
	else
		name=lxc-test-$template
	fi

	lxc-create -t $template -n $name || FAIL "creating $template container"
	lxc-start -n $name -d || FAIL "starting $template container"
	lxc-wait -n $name -s RUNNING || FAIL "waiting for $template container to run"

	for tries in `seq 1 20`; do
		lxcip=$(lxc-info -i -n $name -H | head -n 1)
		[ -z "$lxcip" ] || break
		sleep 1
	done
	[ -n "$lxcip" ] || FAIL "to start networking in $template container"

	if echo "${lxcip}" | grep -q ":"; then
		ping6 -c 1 $lxcip || FAIL "to ping $template container"
	else
		ping -c 1 $lxcip || FAIL "to ping $template container"
	fi

	# Check apparmor
	lxcpid=`lxc-info -n $name -p -H`
	aa=`cat /proc/$lxcpid/attr/current`
	if [ "$aa" != "lxc-container-default-with-nesting (enforce)" -a "$aa" != "lxc-container-default (enforce)" ]; then
		FAIL " to correctly set apparmor profile (profile is \"$aa\")"
	fi
	lxc-stop -n $name -k
	lxc-destroy -n $name
done

exit 0