Merge pull request #232 from ryantm/rtm-12-23-test

dev: reland add direct tests for agenix

.github/workflows/ci.yaml

@@ -9,7 +9,9 @@ jobs:
     - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v22
       with:
-        extra_nix_config: "system-features = nixos-test benchmark big-parallel kvm"
+        extra_nix_config: |
+          system-features = nixos-test recursive-nix benchmark big-parallel kvm
+          extra-experimental-features = recursive-nix nix-command flakes
     - run: nix build
     - run: nix build .#doc
     - run: nix fmt . -- --check

pkgs/agenix.nix

@@ -9,8 +9,10 @@
   substituteAll,
   ageBin ? "${age}/bin/age",
   shellcheck,
-}:
+}: let
-stdenv.mkDerivation rec {
+  bin = "${placeholder "out"}/bin/agenix";
+in
+  stdenv.mkDerivation rec {
     pname = "agenix";
     version = "0.15.0";
     src = substituteAll {
@@ -22,16 +24,39 @@ stdenv.mkDerivation rec {
       src = ./agenix.sh;
     };
     dontUnpack = true;
+    doInstallCheck = true;
+    installCheckInputs = [shellcheck];
+    postInstallCheck = ''
+      shellcheck ${bin}
+      ${bin} -h | grep ${version}
 
-  doCheck = true;
+      HOME=$(mktemp -d 2>/dev/null || mktemp -d -t 'mytmpdir')
-  checkInputs = [shellcheck];
+      function cleanup {
-  postCheck = ''
+        rm -rf $HOME
-    shellcheck $src
+      }
+      trap "cleanup" 0 2 3 15
+
+      mkdir -p $HOME/.ssh
+      cp -r "${../example}" $HOME/secrets
+      chmod -R u+rw $HOME/secrets
+      (
+      umask u=rw,g=r,o=r
+      cp ${../example_keys/user1.pub} $HOME/.ssh/id_ed25519.pub
+      chown $UID $HOME/.ssh/id_ed25519.pub
+      )
+      (
+      umask u=rw,g=,o=
+      cp ${../example_keys/user1} $HOME/.ssh/id_ed25519
+      chown $UID $HOME/.ssh/id_ed25519
+      )
+
+      cd $HOME/secrets
+      test $(${bin} -d secret1.age) = "hello"
     '';
 
     installPhase = ''
-    install -D $src ${placeholder "out"}/bin/agenix
+      install -D $src ${bin}
     '';
 
     meta.description = "age-encrypted secrets for NixOS";
-}
+  }