Add lib symlink to bwrap call (#1312)

* add lib symlink to bwrap call
ansible · Nov 6, 2023 · e81b02c · e81b02c
1 parent 481fc28
commit e81b02c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/src/ansible_runner/config/runner.py b/src/ansible_runner/config/runner.py
@@ -345,6 +345,7 @@ def wrap_args_for_sandbox(self, args):
             '--ro-bind', '/etc', '/etc',
             '--ro-bind', '/usr', '/usr',
             '--ro-bind', '/opt', '/opt',
+            '--symlink', 'usr/lib', '/lib',
             '--symlink', 'usr/lib64', '/lib64',
         ])
 

diff --git a/test/unit/config/test_runner.py b/test/unit/config/test_runner.py
@@ -547,6 +547,7 @@ def test_bwrap_process_isolation_defaults(mocker):
         '--ro-bind', '/etc', '/etc',
         '--ro-bind', '/usr', '/usr',
         '--ro-bind', '/opt', '/opt',
+        '--symlink', 'usr/lib', '/lib',
         '--symlink', 'usr/lib64', '/lib64',
         '--bind', '/', '/',
         '--chdir', '/project',
@@ -601,6 +602,7 @@ def isfile(self, _):
         '--ro-bind', '/etc', '/etc',
         '--ro-bind', '/usr', '/usr',
         '--ro-bind', '/opt', '/opt',
+        '--symlink', 'usr/lib', '/lib',
         '--symlink', 'usr/lib64', '/lib64',
         '--bind', '/', '/',
         '--chdir', os.path.realpath(rc.directory_isolation_path),
@@ -639,6 +641,7 @@ def test_process_isolation_settings(mocker, tmp_path):
         '--ro-bind', '/etc', '/etc',
         '--ro-bind', '/usr', '/usr',
         '--ro-bind', '/opt', '/opt',
+        '--symlink', 'usr/lib', '/lib',
         '--symlink', 'usr/lib64', '/lib64',
     ]
     index = len(expected)