Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 11 additions & 9 deletions envbuilder.go
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,6 @@ import (
"os/exec"
"os/user"
"path/filepath"
"reflect"
"sort"
"strconv"
"strings"
Expand Down Expand Up @@ -1064,16 +1063,19 @@ func createPostStartScript(path string, postStartCommand devcontainer.LifecycleS
// unsetOptionsEnv unsets all environment variables that are used
// to configure the options.
func unsetOptionsEnv() {
val := reflect.ValueOf(&Options{}).Elem()
typ := val.Type()

for i := 0; i < val.NumField(); i++ {
fieldTyp := typ.Field(i)
env := fieldTyp.Tag.Get("env")
if env == "" {
var o Options
for _, opt := range o.CLI() {
if opt.Env == "" {
continue
}
// Do not strip options that do not have the magic prefix!
// For example, CODER_AGENT_URL, CODER_AGENT_TOKEN, CODER_AGENT_SUBSYSTEM.
if !strings.HasPrefix(opt.Env, envPrefix) {
continue
}
os.Unsetenv(env)
// Strip both with and without prefix.
os.Unsetenv(opt.Env)
os.Unsetenv(strings.TrimPrefix(opt.Env, envPrefix))
}
}

Expand Down
40 changes: 40 additions & 0 deletions integration/integration_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -695,6 +695,46 @@ PATH=/usr/local/bin:/bin:/go/bin:/opt
REMOTE_BAR=bar`)
}

func TestUnsetOptionsEnv(t *testing.T) {
t.Parallel()

// Ensures that a Git repository with a devcontainer.json is cloned and built.
srv := createGitServer(t, gitServerOptions{
files: map[string]string{
".devcontainer/devcontainer.json": `{
"name": "Test",
"build": {
"dockerfile": "Dockerfile"
},
}`,
".devcontainer/Dockerfile": "FROM " + testImageAlpine + "\nENV FROM_DOCKERFILE=foo",
},
})
ctr, err := runEnvbuilder(t, options{env: []string{
envbuilderEnv("GIT_URL", srv.URL),
"GIT_URL", srv.URL,
envbuilderEnv("GIT_PASSWORD", "supersecret"),
"GIT_PASSWORD", "supersecret",
envbuilderEnv("INIT_SCRIPT", "env > /root/env.txt && sleep infinity"),
"INIT_SCRIPT", "env > /root/env.txt && sleep infinity",
}})
require.NoError(t, err)

output := execContainer(t, ctr, "cat /root/env.txt")
var os envbuilder.Options
for _, s := range strings.Split(strings.TrimSpace(output), "\n") {
for _, o := range os.CLI() {
if strings.HasPrefix(s, o.Env) {
assert.Fail(t, "environment variable should be stripped when running init script", s)
}
optWithoutPrefix := strings.TrimPrefix(o.Env, envbuilder.WithEnvPrefix(""))
if strings.HasPrefix(s, optWithoutPrefix) {
assert.Fail(t, "environment variable should be stripped when running init script", s)
}
}
}
}

func TestLifecycleScripts(t *testing.T) {
t.Parallel()

Expand Down