tests: add integration test for paused-and-updated containers

Such containers should remain paused after the update. This has
historically been true, but this helps ensure that the systemd cgroup
changes (freezing the container during SetUnitProperties) don't break
this behaviour.

Signed-off-by: Aleksa Sarai <asarai@suse.de>

tests/integration/helpers.bash

@@ -174,7 +174,7 @@ function check_systemd_value() {
 	unitname=$1
 	source=$2
 	expected=$3
-	
+
 	if [ $(id -u) = "0" ]; then
 		current=$(systemctl show $unitname | grep $source)
 	else
@@ -231,6 +231,15 @@ function requires() {
 				skip "test requires ${var}"
 			fi
 			;;
+		cgroups_freezer)
+			init_cgroup_paths
+			if [[ "$CGROUP_UNIFIED" == "yes" ]]
+			then
+				[ -e "$CGROUP_FREEZER_BASE_PATH/cgroup.freeze" ] || skip "test requires ${var}"
+			else
+				[ -e "$CGROUP_FREEZER_BASE_PATH/freezer.state" ] || skip "test requires ${var}"
+			fi
+			;;
 		cgroups_kmem)
 			init_cgroup_paths
 			if [ ! -e "${CGROUP_MEMORY_BASE_PATH}/memory.kmem.limit_in_bytes" ]; then

tests/integration/update.bats

@@ -355,3 +355,23 @@ EOF
 	cat "$CONTAINER_OUTPUT"
 	[ -z "$(<"$CONTAINER_OUTPUT")" ]
 }
+
+@test "update paused container" {
+    [[ "$ROOTLESS" -ne 0 ]] && requires rootless_cgroup
+	requires cgroups_freezer
+
+	# Run the container in the background.
+	runc run -d --console-socket "$CONSOLE_SOCKET" test_update
+	[ "$status" -eq 0 ]
+
+	# Pause the container.
+	runc pause test_update
+	[ "$status" -eq 0 ]
+
+	# Trigger an unrelated update.
+	runc update --pids-limit 30 test_update
+	[ "$status" -eq 0 ]
+
+	# The container should still be paused.
+	testcontainer test_update paused
+}