tests: new regression test for lp-2161982

tests/main/sru-validation-check/task.yaml

@@ -38,10 +38,8 @@ execute: |
     not tests.info is-reexec-in-use
     /usr/bin/env SNAPD_DEBUG=1 snap list 2>&1 | MATCH "DEBUG: re-exec disabled by user"
 
-    # shellcheck disable=SC2034
-    SNAP_MOUNT_DIR="$(os.paths snap-mount-dir)"
     # shellcheck disable=SC2153
-    /usr/bin/env SNAPD_DEBUG=1 SNAP_REEXEC=1 snap list 2>&1 | MATCH "DEBUG: restarting into \"$SNAP_MOUNT_DIR/snapd/current/usr/bin/snap\""
+    /usr/bin/env SNAPD_DEBUG=1 SNAP_REEXEC=1 snap list 2>&1 | MATCH 'DEBUG: restarting into "/snap/snapd/'
 
     # Check the snap version has the proper value expected when the snapd snap is not being used
     . /etc/os-release

tests/regression/lp-2161982/task.yaml

@@ -0,0 +1,14 @@
+summary: Test the vsock-guest interface for confined access to /dev/vsock and AF_VSOCK sockets
+
+details: |
+    LP: #2161982. Test the vsock-guest interface for confined access to /dev/vsock and AF_VSOCK sockets.
+
+prepare: |
+    "$TESTSTOOLS"/snaps-state install-local vsock-guest-test
+
+execute: |
+    snap connect vsock-guest-test:vsock-guest
+    vsock-guest-test.test
+
+    snap disconnect vsock-guest-test:vsock-guest
+    not vsock-guest-test.test

tests/regression/lp-2161982/vsock-guest-test/bin/vsock-guest-test

@@ -0,0 +1,36 @@
+#!/bin/bash
+set -u
+
+failed=0
+
+# Check access to /dev/vsock
+if [[ -e /dev/vsock ]]; then
+    if (exec 3<>/dev/vsock) 2>/dev/null; then
+        echo "PASS: opened /dev/vsock successfully"
+    else
+        echo "FAIL: cannot open /dev/vsock"
+        failed=1
+    fi
+else
+    echo "SKIP: /dev/vsock does not exist"
+fi
+
+# Check whether AF_VSOCK sockets can be created
+if python3 -c '
+import socket
+with socket.socket(socket.AF_VSOCK, socket.SOCK_STREAM):
+    pass
+'; then
+    echo "PASS: created AF_VSOCK SOCK_STREAM socket successfully"
+else
+    echo "FAIL: cannot create AF_VSOCK socket"
+    failed=1
+fi
+
+if [[ "$failed" -eq 0 ]]; then
+    echo "PASS: all vsock checks passed"
+    exit 0
+else
+    echo "FAIL: one or more vsock checks failed"
+    exit 1
+fi

tests/regression/lp-2161982/vsock-guest-test/meta/snap.yaml

@@ -0,0 +1,18 @@
+name: vsock-guest-test
+version: '0.1'
+summary: Test snapd vsock-guest interface
+description: |
+  Tests confined access to /dev/vsock and AF_VSOCK sockets.
+confinement: strict
+grade: devel
+base: core24
+
+apps:
+  test:
+    command: bin/vsock-guest-test
+    plugs:
+      - vsock-guest
+
+plugs:
+  vsock-guest:
+    interface: vsock-guest