42a250cafa
flake.lock previously included a "indirect" reference to nixpkgs. I am not sure what this means but I added `inputs.nixpkgs` and updated nixpkgs because this old version of nixpkgs didn't have any support for aarch64-darwin at all. Now on a aarch64-darwin I can type `nix build` and get a working version of agenix.
58 lines
1.5 KiB
Nix
58 lines
1.5 KiB
Nix
{
|
|
nixpkgs ? <nixpkgs>,
|
|
pkgs ? import <nixpkgs> { inherit system; config = {}; },
|
|
system ? builtins.currentSystem
|
|
} @args:
|
|
|
|
import "${nixpkgs}/nixos/tests/make-test-python.nix" ({ pkgs, ...}: {
|
|
name = "agenix-integration";
|
|
|
|
nodes.system1 = { config, lib, ... }: {
|
|
|
|
imports = [
|
|
../modules/age.nix
|
|
./install_ssh_host_keys.nix
|
|
];
|
|
|
|
services.openssh.enable = true;
|
|
|
|
age.secrets.passwordfile-user1 = {
|
|
file = ../example/passwordfile-user1.age;
|
|
};
|
|
|
|
users = {
|
|
mutableUsers = false;
|
|
|
|
users = {
|
|
user1 = {
|
|
isNormalUser = true;
|
|
passwordFile = config.age.secrets.passwordfile-user1.path;
|
|
};
|
|
};
|
|
};
|
|
|
|
};
|
|
|
|
testScript =
|
|
let
|
|
user = "user1";
|
|
password = "password1234";
|
|
in ''
|
|
system1.wait_for_unit("multi-user.target")
|
|
system1.wait_until_succeeds("pgrep -f 'agetty.*tty1'")
|
|
system1.sleep(2)
|
|
system1.send_key("alt-f2")
|
|
system1.wait_until_succeeds("[ $(fgconsole) = 2 ]")
|
|
system1.wait_for_unit("getty@tty2.service")
|
|
system1.wait_until_succeeds("pgrep -f 'agetty.*tty2'")
|
|
system1.wait_until_tty_matches(2, "login: ")
|
|
system1.send_chars("${user}\n")
|
|
system1.wait_until_tty_matches(2, "login: ${user}")
|
|
system1.wait_until_succeeds("pgrep login")
|
|
system1.sleep(2)
|
|
system1.send_chars("${password}\n")
|
|
system1.send_chars("whoami > /tmp/1\n")
|
|
system1.wait_for_file("/tmp/1")
|
|
assert "${user}" in system1.succeed("cat /tmp/1")
|
|
'';
|
|
}) args
|