dsh 0.2.0-rc.2: in-container update (experimental channel), path-agnostic compose, upstream patches adapted to 0.1.x/0.2.x

upstream/container/platform/test/user-roots.test.mjs

@@ -0,0 +1,33 @@
+import assert from 'node:assert/strict'
+import { lstat, mkdtemp, symlink } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import test from 'node:test'
+import { prepareUserWritableRoot, prepareUserWritableRoots } from '../stage0/lib/user-roots.mjs'
+
+test('prepares custom DSH and workspace mount roots for the supervised user', async () => {
+  const root = await mkdtemp(join(tmpdir(), 'dsh-user-roots-'))
+  const dshHome = join(root, 'custom-dsh')
+  const workspace = join(root, 'custom-workspace')
+  const uid = process.getuid?.()
+  const gid = process.getgid?.()
+  assert.deepEqual(await prepareUserWritableRoots({ dshHome, defaultWorkspace: workspace, uid, gid }), [dshHome, workspace])
+  for (const path of [dshHome, workspace]) {
+    const metadata = await lstat(path)
+    assert.equal(metadata.isDirectory(), true)
+    if (uid !== undefined) assert.equal(metadata.uid, uid)
+    if (gid !== undefined) assert.equal(metadata.gid, gid)
+  }
+})
+
+test('deduplicates shared roots and rejects relative, root, and symbolic-link targets', async () => {
+  const root = await mkdtemp(join(tmpdir(), 'dsh-user-root-validation-'))
+  assert.deepEqual(await prepareUserWritableRoots({ dshHome: root, defaultWorkspace: root }), [root])
+  await assert.rejects(prepareUserWritableRoot('relative'), /absolute path/)
+  await assert.rejects(prepareUserWritableRoot('/'), /filesystem root/)
+  const target = join(root, 'target')
+  const link = join(root, 'link')
+  await prepareUserWritableRoot(target)
+  await symlink(target, link)
+  await assert.rejects(prepareUserWritableRoot(link), /must be a directory/)
+})