Attempts to have systemd working inside the container

Author: srbarrios

.devcontainer/test/Dockerfile

@@ -4,15 +4,30 @@
 
 FROM --platform=linux/amd64 opensuse/leap:15.6
 
-RUN zypper -n install curl git tar gzip make gcc podman systemd systemd-sysvcompat
+RUN zypper -n install curl git tar gzip make gcc podman
 
 # Install Go and Ginkgo
 RUN curl -LO https://go.dev/dl/go1.21.13.linux-amd64.tar.gz
-RUN tar -C /usr/local -xzf go1.21.13.linux-amd64.tar.gz
-ENV PATH="/usr/local/go/bin:$PATH"
+RUN tar -C /root -xzf go1.21.13.linux-amd64.tar.gz
+ENV PATH="/root/go/bin:$PATH"
 RUN go install github.com/onsi/ginkgo/v2/ginkgo@v2.20.1
 
+ENV container=docker
+
+RUN zypper install -y findutils iproute2 python3 sudo systemd
+
+RUN find /etc/systemd/system \
+    /lib/systemd/system \
+    -path '*.wants/*' \
+    -not -name '*journal*' \
+    -not -name '*systemd-tmpfiles*' \
+    -not -name '*systemd-user-sessions*' \
+    -print0 | xargs -0 rm -vf
+
+VOLUME [ "/sys/fs/cgroup" ]
+
 WORKDIR /workspace
 
-# /usr/sbin/init is the standard path for the systemd executable acting as init.
-CMD ["/usr/sbin/init"]
+ENTRYPOINT [ "/usr/sbin/init" ]
+
+CMD ["/bin/bash"]

.devcontainer/test/devcontainer.json

@@ -6,24 +6,17 @@
   "build": { "dockerfile": "Dockerfile" },
   "runArgs": [
     "--privileged",
-    "--tmpfs /tmp",
-    "--tmpfs /run",
-    "--cap-add=SYS_ADMIN",
-    "--cap-add=AUDIT_WRITE",
-    "--cap-add=AUDIT_CONTROL",
+    "--cap-add=ALL",
     "--cgroupns=host",
-    "--volume=/sys/fs/cgroup:/sys/fs/cgroup:ro"
+    "--tmpfs /run",
+    "--tmpfs /run/lock",
+    "-v", "/sys/fs/cgroup:/sys/fs/cgroup:rw"
   ],
-  "init": true,
-  "securityOpt": [ "seccomp=unconfined" ], // needed for systemd
   "containerEnv": {
       "container": "docker"
   },
   "remoteUser": "root",
-  "customizations": {
-    "vscode": {
-      "extensions": ["golang.Go"]
-    }
-  },
+  "containerUser": "root",
+  "overrideCommand": false,
   "workspaceFolder": "/workspace"
 }

README.md

@@ -150,8 +150,23 @@ Those are generated using the `locale/build.sh` script.
 
 ### To run End-To-End tests
 
+Use podman machine as the container runtime and set it as `rootful`:
+```bash
+podman machine stop
+podman machine set --rootful=true --memory=8192
+podman machine start
+export DOCKER_HOST="unix://$(podman info --format '{{.Host.RemoteSocket.Path}}')"
+
+```
+
+Then, you can run the devcontainer commands to build and run the devcontainer for testing:
 ```bash
 devcontainer up --workspace-folder . --config .devcontainer/test/devcontainer.json
+devcontainer exec --workspace-folder . bash
+```
+
+Once inside the devcontainer, you can run the tests with:
+```bash
 cd /workspace
 go build -o bin/mgradm ./mgradm
 go build -o bin/mgrctl ./mgrctl