mynix/agenix
1
0
Fork 0
mirror of https://github.com/ryantm/agenix.git synced 2024-11-25 19:18:28 +03:00
Code Issues Projects Releases Packages Wiki Activity

contrib: add direct tests for agenix

Browse source 
These tests are MUCH faster than the NixOS tests.
This commit is contained in:
Ryan Mulligan 2023-02-21 20:35:56 -08:00
parent 564595d0ad
commit 097aa18b59
2 changed files with 49 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
.github/workflows/ci.yaml vendored
View file

@ -9,7 +9,9 @@ jobs:
- uses: actions/checkout@v3 - uses: actions/checkout@v3
- uses: cachix/install-nix-action@v22 - uses: cachix/install-nix-action@v22
with: with:
extra_nix_config: "system-features = nixos-test benchmark big-parallel kvm" extra_nix_config: |
system-features = nixos-test recursive-nix benchmark big-parallel kvm
extra-experimental-features = recursive-nix nix-command flakes
- run: nix build - run: nix build
- run: nix build .#doc - run: nix build .#doc
- run: nix fmt . -- --check - run: nix fmt . -- --check
@ -20,7 +22,9 @@ jobs:
- uses: actions/checkout@v3 - uses: actions/checkout@v3
- uses: cachix/install-nix-action@v22 - uses: cachix/install-nix-action@v22
with: with:
extra_nix_config: "system-features = nixos-test benchmark big-parallel kvm" extra_nix_config: |
system-features = nixos-test recursive-nix benchmark big-parallel kvm
extra-experimental-features = recursive-nix nix-command flakes
- run: nix build - run: nix build
- run: nix build .#doc - run: nix build .#doc
- run: nix fmt . -- --check - run: nix fmt . -- --check

66
pkgs/agenix.nix
View file

@ -9,29 +9,49 @@
substituteAll, substituteAll,
ageBin ? "${rage}/bin/rage", ageBin ? "${rage}/bin/rage",
shellcheck, shellcheck,
}: }: let
stdenv.mkDerivation rec { bin = "${placeholder "out"}/bin/agenix";
pname = "agenix"; in
version = "0.15.0"; stdenv.mkDerivation rec {
src = substituteAll { pname = "agenix";
inherit ageBin version; version = "0.15.0";
jqBin = "${jq}/bin/jq"; src = substituteAll {
nixInstantiate = "${nix}/bin/nix-instantiate"; inherit ageBin version;
mktempBin = "${mktemp}/bin/mktemp"; jqBin = "${jq}/bin/jq";
diffBin = "${diffutils}/bin/diff"; nixInstantiate = "${nix}/bin/nix-instantiate";
src = ./agenix.sh; mktempBin = "${mktemp}/bin/mktemp";
}; diffBin = "${diffutils}/bin/diff";
dontUnpack = true; src = ./agenix.sh;
};
dontUnpack = true;
doInstallCheck = true;
installCheckInputs = [shellcheck];
postInstallCheck = ''
shellcheck ${bin}
${bin} -h | grep ${version}
doCheck = true; mkdir -p /tmp/home/.ssh
checkInputs = [shellcheck]; cp -r "${../example}" /tmp/home/secrets
postCheck = '' chmod -R u+rw /tmp/home/secrets
shellcheck $src export HOME=/tmp/home
''; (
umask u=rw,g=r,o=r
cp ${../example_keys/user1.pub} $HOME/.ssh/id_ed25519.pub
chown $UID $HOME/.ssh/id_ed25519.pub
)
(
umask u=rw,g=,o=
cp ${../example_keys/user1} $HOME/.ssh/id_ed25519
chown $UID $HOME/.ssh/id_ed25519
)
installPhase = '' cd /tmp/home/secrets
install -D $src ${placeholder "out"}/bin/agenix test $(${bin} -d secret1.age) = "hello"
''; '';
meta.description = "age-encrypted secrets for NixOS"; installPhase = ''
} install -D $src ${bin}
'';
meta.description = "age-encrypted secrets for NixOS";
}