test runc exec with RLIMIT_NOFILE

Signed-off-by: lifubang <[email protected]>

.cirrus.yml

@@ -161,6 +161,8 @@ task:
     systemctl restart sshd
   host_info_script: |
     uname -a
+    ulimit -a
+    ulimit -aH
     # -----
     /usr/local/go/bin/go version
     # -----

tests/integration/exec.bats

@@ -3,6 +3,7 @@
 load helpers
 
 function setup() {
+	[ $EUID -eq 0 ] && prlimit --nofile=1024:1048576 -p $$
 	setup_busybox
 }
 
@@ -476,3 +477,21 @@ EOF
 	[ "$status" -eq 0 ]
 	[[ "${lines[0]}" == "Cpus_allowed_list:	$all_cpus" ]]
 }
+
+@test "runc exec with RLIMIT_NOFILE" {
+	update_config '.process.capabilities.bounding = ["CAP_SYS_RESOURCE"]'
+	update_config '.process.rlimits = [{"type": "RLIMIT_NOFILE", "hard": 65536, "soft": 65536}]'
+
+	runc run -d --console-socket "$CONSOLE_SOCKET" test_busybox
+	[ "$status" -eq 0 ]
+
+	update_config '.process.args = ["/bin/sh", "-c", "ulimit -n"]'
+	[ "$status" -eq 0 ]
+	runc run test_ulimit
+	[[ "${output}" == "65536" ]]
+
+	# issue: https://github.com/opencontainers/runc/issues/4195
+	runc exec test_busybox /bin/sh -c "ulimit -n"
+	[ "$status" -eq 0 ]
+	[[ "${output}" == "65536" ]]
+}