Test for 'Running Host Commands from Container'

[jovatn]

Description

Infix provides the ability to run host commands from a container, but there is no auto-test to discover if the feature stops working.

Note

This is an advanced feature, and should only be enabled for trusted containers.

Additional Information

One possible way to test this functionality is to add a test script, or similar, to the curiOS system container, that a test can call to verify the functionality.

The script can, e.g., try to break out of the container to change the hostname of the host system. This can be easily be detected by the test if it works.

If there are any questions regarding this idea, please connect with @troglobit for a one-on-one session.

General Information

Anyone can help out by sponsoring development of new features or contributing pull requests.
Please use this issue for discussions related to the feature.

[troglobit]

@axkar the latest PR #1067 contains the bump of curiOS containers in Infix where the nftables container now has BusyBox shell and tooling for namespaces (nsenter + unshare).