integration/run-integration-tests-in-lxd: bail if unprivileged userns…

… clone is not permitted Signed-off-by: Simon Deziel <[email protected]>
canonical · Jul 14, 2023 · 61b689d · 61b689d
1 parent f9e4821
commit 61b689d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/integration/run-integration-tests-in-lxd b/integration/run-integration-tests-in-lxd
@@ -33,6 +33,13 @@ function run_tests {
     lxc delete --force "$container_name"
 }
 
+# Make sure unprivileged userns clone is enabled otherwise security.nesting=true
+# won't work.
+if [ "$(cat /proc/sys/kernel/unprivileged_userns_clone)" -eq 0 ]; then
+    echo "unpriviliged userns clone disabled, unable to run tests" >&2
+    exit 1
+fi
+
 declare -a images
 if [ $# -gt 0 ]; then
     images=("$@")