mynix/agenix
1
0
Fork 0
mirror of https://github.com/ryantm/agenix.git synced 2024-11-24 18:48:29 +03:00
Code Issues Projects Releases Packages Wiki Activity

Test home-manager module

Browse source
This commit is contained in:
Bruno BELANYI 2023-04-23 11:22:35 +01:00
parent 1f43d94d52
commit 0155c5710e
2 changed files with 23 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -58,7 +58,7 @@
packages.x86_64-linux.default = self.packages.x86_64-linux.agenix; packages.x86_64-linux.default = self.packages.x86_64-linux.agenix;
packages.x86_64-linux.doc = doc "x86_64-linux"; packages.x86_64-linux.doc = doc "x86_64-linux";
checks.x86_64-linux.integration = import ./test/integration.nix { checks.x86_64-linux.integration = import ./test/integration.nix {
inherit nixpkgs; inherit nixpkgs home-manager;
pkgs = nixpkgs.legacyPackages.x86_64-linux; pkgs = nixpkgs.legacyPackages.x86_64-linux;
system = "x86_64-linux"; system = "x86_64-linux";
}; };

22
test/integration.nix
View file

@ -6,6 +6,7 @@
config = {}; config = {};
}, },
system ? builtins.currentSystem, system ? builtins.currentSystem,
home-manager ? <home-manager>,
}: }:
pkgs.nixosTest { pkgs.nixosTest {
name = "agenix-integration"; name = "agenix-integration";
@ -18,6 +19,7 @@ pkgs.nixosTest {
imports = [ imports = [
../modules/age.nix ../modules/age.nix
./install_ssh_host_keys.nix ./install_ssh_host_keys.nix
"${home-manager}/nixos"
]; ];
services.openssh.enable = true; services.openssh.enable = true;
@ -43,11 +45,28 @@ pkgs.nixosTest {
}; };
}; };
}; };
home-manager.users.user1 = {options, ...}: {
imports = [
../modules/age-home.nix
];
home.stateVersion = pkgs.lib.trivial.release;
age = {
identityPaths = options.age.identityPaths.default ++ ["/home/user1/.ssh/this_key_wont_exist"];
secrets.secret2 = {
# Only decryptable by user1's key
file = ../example/secret2.age;
};
};
};
}; };
testScript = let testScript = let
user = "user1"; user = "user1";
password = "password1234"; password = "password1234";
secret2 = "world!";
in '' in ''
system1.wait_for_unit("multi-user.target") system1.wait_for_unit("multi-user.target")
system1.wait_until_succeeds("pgrep -f 'agetty.*tty1'") system1.wait_until_succeeds("pgrep -f 'agetty.*tty1'")
@ -65,6 +84,9 @@ pkgs.nixosTest {
system1.send_chars("whoami > /tmp/1\n") system1.send_chars("whoami > /tmp/1\n")
system1.wait_for_file("/tmp/1") system1.wait_for_file("/tmp/1")
assert "${user}" in system1.succeed("cat /tmp/1") assert "${user}" in system1.succeed("cat /tmp/1")
system1.send_chars("cat /run/user/$(id -u)/agenix/secret2 > /tmp/2\n")
system1.wait_for_file("/tmp/2")
assert "${secret2}" in system1.succeed("cat /tmp/2")
userDo = lambda input : f"sudo -u user1 -- bash -c 'set -eou pipefail; cd /tmp/secrets; {input}'" userDo = lambda input : f"sudo -u user1 -- bash -c 'set -eou pipefail; cd /tmp/secrets; {input}'"