Bug 2111622

Sanity tests are passed on runc-1.1.3-2.el9_0.x86_64.

[root@kvm-08-guest16 ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.0 (Plow)

[root@kvm-08-guest16 ~]# rpm -q runc systemd kernel
runc-1.1.3-2.el9_0.x86_64
systemd-250-6.el9_0.x86_64
kernel-5.14.0-70.19.1.el9_0.x86_64

[root@kvm-08-guest16 runc-stable]# git branch
* container-tools-rhel9-9.0.0
  master
[root@kvm-08-guest16 runc-stable]# bats -t tests/integration/
1..169
ok 1 runc exec (cgroup v2, ro cgroupfs, new cgroupns) does not chown cgroup # skip test requires systemd
ok 2 runc exec (cgroup v2, rw cgroupfs, inh cgroupns) does not chown cgroup # skip test requires systemd
ok 3 runc exec (cgroup v2, rw cgroupfs, new cgroupns) does chown cgroup # skip test requires systemd
ok 4 runc create (no limits + no cgrouppath + no permission) succeeds
ok 5 runc create (rootless + no limits + cgrouppath + no permission) fails with permission error # skip test requires rootless
ok 6 runc create (rootless + limits + no cgrouppath + no permission) fails with informative error # skip test requires rootless
ok 7 runc create (limits + cgrouppath + permission on the cgroup dir) succeeds
ok 8 runc exec (limits + cgrouppath + permission on the cgroup dir) succeeds
ok 9 runc exec (cgroup v2 + init process in non-root cgroup) succeeds
ok 10 runc run (cgroup v1 + unified resources should fail) # skip test requires cgroups_v1
ok 11 runc run (blkio weight)
ok 12 runc run (per-device io weight for bfq)
ok 13 runc run (cgroup v2 resources.unified only)
ok 14 runc run (cgroup v2 resources.unified override)
ok 15 runc run (cgroupv2 mount inside container)
ok 16 runc exec (cgroup v1+hybrid joins correct cgroup) # skip test requires cgroups_hybrid
ok 17 runc exec should refuse a paused container
ok 18 runc exec --ignore-paused
ok 19 runc run/create should warn about a non-empty cgroup
ok 20 runc run/create should refuse pre-existing frozen cgroup
ok 21 checkpoint and restore
ok 22 checkpoint and restore (bind mount, destination is symlink)
ok 23 checkpoint and restore (with --debug)
ok 24 checkpoint and restore (cgroupns) # skip test requires cgroups_v1
ok 25 checkpoint --pre-dump (bad --parent-path)
ok 26 checkpoint --pre-dump and restore
ok 27 checkpoint --lazy-pages and restore # skip this criu does not support lazy migration
ok 28 checkpoint and restore in external network namespace
ok 29 checkpoint and restore with container specific CRIU config
ok 30 checkpoint and restore with nested bind mounts
ok 31 runc create
ok 32 runc create exec
ok 33 runc create --pid-file
ok 34 runc create --pid-file with new CWD
ok 35 runc version
ok 36 runc exec --user with no access to cwd
ok 37 runc create sets up user before chdir to cwd if needed # skip test requires rootless
ok 38 runc create can chdir if runc has access
ok 39 global --debug
ok 40 global --debug to --log
ok 41 global --debug to --log --log-format 'text'
ok 42 global --debug to --log --log-format 'json'
ok 43 runc delete
ok 44 runc delete --force
ok 45 runc delete --force ignore not exist
ok 46 runc delete --force [paused container]
ok 47 runc delete --force in cgroupv1 with subcgroups # skip test requires cgroups_v1
ok 48 runc delete --force in cgroupv2 with subcgroups
ok 49 runc run [redundant default /dev/tty]
ok 50 runc run [redundant default /dev/ptmx]
ok 51 runc run/update [device cgroup deny]
ok 52 runc run [device cgroup allow rw char device]
ok 53 runc run [device cgroup allow rm block device]
ok 54 events --stats
ok 55 events --interval default
ok 56 events --interval 1s
ok 57 events --interval 100ms
ok 58 events oom
ok 59 runc exec
ok 60 runc exec [exit codes]
ok 61 runc exec --pid-file
ok 62 runc exec --pid-file with new CWD
ok 63 runc exec ls -la
ok 64 runc exec ls -la with --cwd
ok 65 runc exec --env
ok 66 runc exec --user
ok 67 runc exec --additional-gids
ok 68 runc exec --preserve-fds
ok 69 runc --debug exec
ok 70 runc --debug --log exec
ok 71 runc exec --cgroup sub-cgroups [v1] # skip ignore this tests on RHEL 9.y
ok 72 runc exec --cgroup subcgroup [v2] # skip ignore this tests on RHEL 9.y
ok 73 runc -h
ok 74 runc command -h
ok 75 runc foo -h
ok 76 runc run (hooks library tests)
ok 77 kill detached busybox
ok 78 list
ok 79 mask paths [file]
ok 80 mask paths [directory]
ok 81 runc run [bind mount]
ok 82 runc run [ro tmpfs mount]
ok 83 runc run [ro /dev mount]
ok 84 runc run [tmpfs mount with absolute symlink]
ok 85 runc run [rbind,ro mount is read-only but not recursively]
ok 86 runc run [rbind,rro mount is recursively read-only]
ok 87 runc run [rbind,ro,rro mount is recursively read-only too]
ok 88 runc run [rw bind mount of a ro fuse sshfs mount] # skip test requires working sshfs mounts
ok 89 runc run --no-pivot must not expose bare /proc
ok 90 runc pause and resume
ok 91 runc pause and resume with nonexist container
ok 92 ps
ok 93 ps -f json
ok 94 ps -e -x
ok 95 ps after the container stopped
ok 96 global --root
ok 97 runc run
ok 98 runc run --keep
ok 99 runc run --keep (check cgroup exists)
ok 100 runc run [seccomp -ENOSYS handling]
ok 101 runc run [seccomp defaultErrnoRet=ENXIO]
ok 102 runc run [seccomp] (SCMP_ACT_ERRNO default)
ok 103 runc run [seccomp] (SCMP_ACT_ERRNO explicit errno)
ok 104 runc run [seccomp] (SCMP_ACT_KILL)
ok 105 runc run [seccomp] (startContainer hook)
ok 106 runc run [seccomp] (SCMP_ACT_NOTIFY noNewPrivileges false)
ok 107 runc run [seccomp] (SCMP_ACT_NOTIFY noNewPrivileges true)
ok 108 runc exec [seccomp] (SCMP_ACT_NOTIFY noNewPrivileges false)
ok 109 runc exec [seccomp] (SCMP_ACT_NOTIFY noNewPrivileges true)
ok 110 runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges false)
ok 111 runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges true)
ok 112 runc run [seccomp] (ignore listener path if no notify act)
ok 113 runc run [seccomp] (SCMP_ACT_NOTIFY empty listener path and notify act)
ok 114 runc run [seccomp] (SCMP_ACT_NOTIFY wrong listener path)
ok 115 runc run [seccomp] (SCMP_ACT_NOTIFY wrong abstract listener path)
ok 116 runc run [seccomp] (SCMP_ACT_NOTIFY kill seccompagent)
ok 117 runc run [seccomp] (SCMP_ACT_NOTIFY no seccompagent)
ok 118 runc run [seccomp] (SCMP_ACT_NOTIFY error chmod)
ok 119 runc run [seccomp] (SCMP_ACT_NOTIFY write)
ok 120 runc run [seccomp] (SCMP_ACT_NOTIFY startContainer hook)
ok 121 runc run [seccomp] (SCMP_ACT_NOTIFY example config)
ok 122 runc run [seccomp] (SCMP_ACT_NOTIFY old kernel) # skip requires kernel less than 5.6
ok 123 spec generation cwd
ok 124 spec generation --bundle
ok 125 spec validator
ok 126 runc start
ok 127 runc run detached
ok 128 runc run detached ({u,g}id != 0)
ok 129 runc run detached --pid-file
ok 130 runc run detached --pid-file with new CWD
ok 131 runc run
ok 132 runc run ({u,g}id != 0)
ok 133 runc run with rootfs set to .
ok 134 runc run --pid-file
ok 135 runc run [rootless with host pidns]
ok 136 runc run [redundant seccomp rules]
ok 137 state (kill + delete)
ok 138 state (pause + resume)
ok 139 runc run [stdin not a tty]
ok 140 runc run [tty ptsname]
ok 141 runc run [tty owner]
ok 142 runc run [tty owner] ({u,g}id != 0)
ok 143 runc exec [stdin not a tty]
ok 144 runc exec [tty ptsname]
ok 145 runc exec [tty owner]
ok 146 runc exec [tty owner] ({u,g}id != 0)
ok 147 runc exec [tty consolesize]
ok 148 runc create [terminal=false]
ok 149 runc run [terminal=false]
ok 150 runc run -d [terminal=false]
ok 151 umask
ok 152 update cgroup v1/v2 common limits
ok 153 update cgroup cpu limits
ok 154 set cpu period with no quota
ok 155 set cpu period with no quota (invalid period)
ok 156 set cpu quota with no period
ok 157 update cpu period with no previous period/quota set
ok 158 update cpu quota with no previous period/quota set
ok 159 update cpu period in a pod cgroup with pod limit set # skip test requires cgroups_v1
ok 160 update cgroup v2 resources via unified map
ok 161 update cpuset parameters via resources.CPU
ok 162 update cpuset parameters via v2 unified map
ok 163 update rt period and runtime # skip test requires cgroups_v1
ok 164 update devices [minimal transition rules]
ok 165 update paused container
ok 166 userns with simple mount
ok 167 userns with 2 inaccessible mounts
ok 168 userns with inaccessible mount + exec
ok 169 runc version

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (runc bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:5960