drivers_test.go RawHistoryFolder

1// SPDX-License-Identifier: MIT
2
3package drivers
4
5import (
6	"go/ast"
7	"go/parser"
8	"go/token"
9	"testing"
10)
11
12// The container option that lets a driver run against a rootless Docker daemon
13// exists for tests: with it the nested dockerd of the job cannot start, so jobs
14// would run without Docker and with weaker isolation than the runner promises.
15// Production code (this package builds the drivers of `ermite-runner run`) must
16// never mention it, neither as a field of Options nor in a value.
17func TestProductionFactoriesNeverSetTheTestOnlyRootlessOption(t *testing.T) {
18	fset := token.NewFileSet()
19	files, err := parser.ParseFile(fset, "drivers.go", nil, 0)
20	if err != nil {
21		t.Fatal(err)
22	}
23	found := false
24	ast.Inspect(files, func(n ast.Node) bool {
25		switch x := n.(type) {
26		case *ast.Ident:
27			if x.Name == "UnsafeAllowRootlessForTests" || x.Name == "AllowRootless" {
28				t.Errorf("%s: %s is a test-only option", fset.Position(x.Pos()), x.Name)
29			}
30		case *ast.CompositeLit:
31			if sel, ok := x.Type.(*ast.SelectorExpr); ok && sel.Sel.Name == "Options" {
32				found = true
33				if len(x.Elts) != 0 {
34					t.Errorf("%s: %s{...} sets options in production code", fset.Position(x.Pos()), sel.Sel.Name)
35				}
36			}
37		}
38		return true
39	})
40	if !found {
41		t.Fatal("drivers.go no longer builds container.Options{}: update this test")
42	}
43}