//go:build linux

package hostfloor

import (
	"os"
	"path/filepath"
	"testing"
)

func TestControllerDirectoryRefusesLinkedAncestor(t *testing.T) {
	real := t.TempDir()
	if err := os.Mkdir(filepath.Join(real, "data"), 0o755); err != nil {
		t.Fatal(err)
	}
	alias := filepath.Join(t.TempDir(), "linked")
	if err := os.Symlink(real, alias); err != nil {
		t.Fatal(err)
	}
	data := filepath.Join(alias, "data")
	if err := EnsureControllerDir(data, os.Getuid(), os.Getgid()); err == nil {
		t.Fatal("created controller directory through symlinked ancestor")
	}
	if _, err := os.Stat(filepath.Join(real, "data", ".hostexec")); !os.IsNotExist(err) {
		t.Fatalf("controller directory created: %v", err)
	}
	if err := os.Mkdir(filepath.Join(real, "data", ".hostexec"), 0o755); err != nil {
		t.Fatal(err)
	}
	for _, strict := range []bool{false, true} {
		if err := CheckParticipation(t.Context(), data, strict); err == nil {
			t.Fatalf("participation accepted linked ancestor with requireDirectory=%v", strict)
		}
	}
}