Restore native LTX media mounts with a restricted shared-directory policy

2026-09-30 15:47:24 +02:00
parent ea33527233
commit 21f11eac57
3 changed files with 13 additions and 3 deletions
@@ -82,6 +82,11 @@ class ContainerTests(unittest.TestCase):
  for change in (lambda x:x.update(unsupported=True),lambda x:x.update(network='host'),lambda x:x['ports']['8000/tcp'][0].update(HostIp='0.0.0.0'),lambda x:x.update(mounts=[dict(index=0,target='/var/run/docker.sock',deck_path=None,read_only=True,was_file=True,files={})])):
   bad=copy.deepcopy(c);change(bad)
   with self.assertRaises(ValueError):validate_container(bad)
+ def test_only_deskweb_can_mount_its_specific_writable_media_folder(self):
+  c=self.config();c.update(name='ltx-deskweb',mounts=[dict(index=0,target='/data/inputs',deck_path='video/original-work/remote-inputs/deskweb',read_only=False,was_file=False,files={})]);validate_container(c)
+  for change in (lambda x:x.update(name='other-ui'),lambda x:x['mounts'][0].update(deck_path='models'),lambda x:x['mounts'][0].update(deck_path='video/original-work'),lambda x:x['mounts'][0].update(target='/data/outputs')):
+   bad=copy.deepcopy(c);change(bad)
+   with self.assertRaises(ValueError):validate_container(bad)
 def test_never_replaces_existing_foreign_container(self):
  with tempfile.TemporaryDirectory() as d:
   manager=Mock(state=Path(d));(Path(d)/'backup-policy.json').write_text(json.dumps({'deck_state':d}))