runnerd-core 0.0.13

Config, domain logic and API types shared by runnerd and its clients
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

//! What each isolation backend sets on a runner container.

use std::collections::BTreeMap;

use bollard::models::HostConfig;

use super::backend;
use crate::config::Isolation;
use crate::docker::{RunnerSpec, create_body};

fn host_config(isolation: Isolation) -> HostConfig {
    let spec = RunnerSpec {
        name: "runnerd-jvm-1".to_owned(),
        image: "runnerd-runner:jvm".to_owned(),
        profile: "jvm".to_owned(),
        slice: "ci.slice".to_owned(),
        cpus: 8,
        memory: "9G".parse().unwrap(),
        env: Vec::new(),
        mounts: Vec::new(),
        network: None,
        labels: BTreeMap::new(),
        entrypoint: None,
        jit_config: None,
    };
    create_body(&spec, backend(isolation)).host_config.unwrap()
}

#[test]
fn sysbox_runs_unprivileged_under_sysbox_runc() {
    let host_config = host_config(Isolation::Sysbox);
    assert_eq!(host_config.runtime.as_deref(), Some("sysbox-runc"));
    assert_eq!(host_config.privileged, Some(false));
}

#[test]
fn unsafe_dind_runs_privileged_and_says_so() {
    let host_config = host_config(Isolation::UnsafeDind);
    assert_eq!(host_config.runtime.as_deref(), Some("runc"));
    assert_eq!(host_config.privileged, Some(true));
    assert!(backend(Isolation::UnsafeDind).is_unsafe());
    assert!(!backend(Isolation::Sysbox).is_unsafe());
}

#[test]
fn every_backend_keeps_the_slice_and_the_profile_limits() {
    for isolation in [Isolation::Sysbox, Isolation::UnsafeDind] {
        let host_config = host_config(isolation);
        let memory = 9 << 30;
        assert_eq!(host_config.cgroup_parent.as_deref(), Some("ci.slice"));
        assert_eq!(host_config.memory, Some(memory));
        assert_eq!(
            host_config.memory_swap,
            Some(memory),
            "no swap beyond memory"
        );
        assert_eq!(host_config.nano_cpus, Some(8_000_000_000));
    }
}