mirror of
https://github.com/RGBCube/agenix
synced 2025-07-30 18:27:45 +00:00
9d8f0f5e5c
This allows using python linters and tools directly and makes it much easier to create our own convenience methods. If we can avoid the trap of excess complexity and configurability, I think this could facilitate addition of much broader integration tests, especially for the CLI.
83 lines
2 KiB
Nix
83 lines
2 KiB
Nix
{
|
|
nixpkgs ? <nixpkgs>,
|
|
pkgs ?
|
|
import <nixpkgs> {
|
|
inherit system;
|
|
config = {};
|
|
},
|
|
system ? builtins.currentSystem,
|
|
}:
|
|
pkgs.nixosTest {
|
|
name = "agenix-integration";
|
|
extraPythonPackages = ps: let
|
|
agenixTesting = let
|
|
version = (pkgs.callPackage ../pkgs/agenix.nix {}).version;
|
|
in
|
|
ps.buildPythonPackage rec {
|
|
inherit version;
|
|
pname = "agenix_testing";
|
|
src = ./.;
|
|
format = "pyproject";
|
|
propagatedBuildInputs = [ps.setuptools];
|
|
postPatch = ''
|
|
# Keep a default version makes for easy installation outside of
|
|
# nix for debugging
|
|
substituteInPlace pyproject.toml \
|
|
--replace 'version = "0.1.0"' 'version = "${version}"'
|
|
'';
|
|
};
|
|
in [agenixTesting];
|
|
nodes.system1 = {
|
|
config,
|
|
pkgs,
|
|
options,
|
|
...
|
|
}: {
|
|
imports = [
|
|
../modules/age.nix
|
|
./install_ssh_host_keys.nix
|
|
];
|
|
|
|
services.openssh.enable = true;
|
|
|
|
age.secrets.passwordfile-user1 = {
|
|
file = ../example/passwordfile-user1.age;
|
|
};
|
|
|
|
age.identityPaths = options.age.identityPaths.default ++ ["/etc/ssh/this_key_wont_exist"];
|
|
|
|
environment.systemPackages = [
|
|
(pkgs.callPackage ../pkgs/agenix.nix {})
|
|
];
|
|
|
|
users = {
|
|
mutableUsers = false;
|
|
|
|
users = {
|
|
user1 = {
|
|
isNormalUser = true;
|
|
passwordFile = config.age.secrets.passwordfile-user1.path;
|
|
uid = 1000;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
testScript = let
|
|
user = "user1";
|
|
password = "password1234";
|
|
in ''
|
|
# Skipping analyzing "agenix_testing": module is installed, but missing
|
|
# library stubs or py.typed marker
|
|
from agenix_testing import AgenixTester # type: ignore
|
|
tester = AgenixTester(system=system1, user="${user}", password="${password}")
|
|
|
|
# Can still be used as before
|
|
system1.send_chars("whoami > /tmp/1\n")
|
|
# Or from `tester.system`
|
|
tester.system.wait_for_file("/tmp/1")
|
|
assert "${user}" in tester.system.succeed("cat /tmp/1")
|
|
|
|
tester.run_all()
|
|
'';
|
|
}
|