TTF/laboratori-cloud
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(lab-01): align student flow and final verification

Browse Source
This commit is contained in:
Luca Sacchi Ricciardi
2026-04-10 13:03:43 +00:00
parent 89c8e6ae07
commit 49e15f7ea2
10 changed files with 121 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files
labs/lab-01-iam/tests/99-final-verification.sh
+18 -7
View File
@@ -6,7 +6,7 @@
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
RED='\033[0;31m'
GREEN='\033[0;32m'
@@ -41,11 +41,15 @@ echo ""
# Test 2: Docker access control
echo -e "${BLUE}[2/3] Checking Docker access control...${NC}"
if sudo -u lab01_student docker ps &>/dev/null; then
echo -e " ${GREEN}✓${NC} lab01_student can access Docker socket"
if ! id lab01_student &>/dev/null; then
echo -e " ${RED}✗${NC} lab01_student does not exist"
all_passed=false
elif groups lab01_student 2>/dev/null | grep -q docker; then
echo -e " ${GREEN}✓${NC} lab01_student is configured for Docker access via docker group"
echo -e " ${YELLOW} Note:${NC} verify interactively with 'sudo -u lab01_student -i docker ps' if you want a live runtime check"
else
echo -e " ${RED}✗${NC} lab01_student cannot access Docker socket"
echo -e " ${YELLOW} Hint: User may need to re-login for group membership to take effect${NC}"
echo -e " ${RED}✗${NC} lab01_student is not in docker group"
echo -e " ${YELLOW} Hint: run 'sudo usermod -aG docker lab01_student' and open a new login session${NC}"
all_passed=false
fi
echo ""
@@ -60,8 +64,15 @@ if [ ! -f "$compose_file" ]; then
else
echo -e " ${GREEN}✓${NC} docker-compose.yml exists"
if docker compose -f "$compose_file" config &>/dev/null; then
echo -e " ${GREEN}✓${NC} docker-compose.yml syntax is valid"
else
echo -e " ${RED}✗${NC} docker-compose.yml has syntax errors"
all_passed=false
fi
# Check for user directive in services
if grep -A 20 "services:" "$compose_file" | grep -q "user:"; then
if grep -q '^[[:space:]]*user:' "$compose_file"; then
echo -e " ${GREEN}✓${NC} Services configured with non-root user directive"
else
echo -e " ${RED}✗${NC} No user directive found in docker-compose.yml"
@@ -89,7 +100,7 @@ else
all_passed=false
fi
else
echo -e " ${YELLOW}○${NC} No containers running (start with docker compose up)"
echo -e " ${YELLOW}○${NC} No containers running (start with docker compose up -d --build)"
fi
fi
echo ""