Matthew Grossman 7225baed8a test(oci): cover default and policy identities in the oci-image suite (#4521) ...

Add two scenarios to the shared oci-image feature suite:

- An image without USER, with no policy identity, runs as the numeric
  default 1000:1000 without the supplementary groups of the image's
  UID 1000 account.
- A policy run_as_user and run_as_group replace an image's USER root.

Both check the main process, sandbox exec, and the workload container
user. Factor policy temp files into a small helper.

Closes #4431.

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

2026-10-14 17:41:09 +00:00

..

ansible

test(oci): add a shared Docker and Podman suite for image USER and WORKDIR (#3931)

2026-10-13 13:00:59 +00:00

cloud-init

test(tmachine): add portable VM-based container runtime testing (#3371)

2026-09-16 11:54:28 +00:00

suites

test(oci): cover default and policy identities in the oci-image suite (#4521)

2026-10-14 17:41:09 +00:00

support

refactor(runtime): confine and reduce unsafe code (#4130)

2026-10-10 01:12:03 +00:00

tmachine

test(tmachine): add interactive shell testsuite (#3522)

2026-09-22 07:01:56 +00:00

artifacts.nix

test(podman): run the e2e binaries that pass in the tmachine guest (#4422)

2026-10-13 13:25:12 +00:00

config.nix

test(oci): add a shared Docker and Podman suite for image USER and WORKDIR (#3931)

2026-10-13 13:00:59 +00:00

images.nix

test(tmachine): add portable VM-based container runtime testing (#3371)

2026-09-16 11:54:28 +00:00