feat(nix-compat/nixcpp): init nix.conf config parsing

This allows parsing files like `/etc/nix/nix.conf` into the `NixConfig`
struct.

Change-Id: I90b25f43c429dd56127500ff5068e83852adee13
Reviewed-on: https://cl.tvl.fyi/c/depot/+/11888
Autosubmit: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
Reviewed-by: Brian Olsen <me@griff.name>
This commit is contained in:
Florian Klink 2024-06-28 12:14:30 +03:00 committed by flokli
parent 327d115f3f
commit 03c9917749
5 changed files with 250 additions and 0 deletions

View file

@ -3,6 +3,7 @@ pub mod derivation;
pub mod nar;
pub mod narinfo;
pub mod nixbase32;
pub mod nixcpp;
pub mod nixhash;
pub mod path_info;
pub mod store_path;

View file

@ -0,0 +1,202 @@
use std::{fmt::Display, str::FromStr};
/// Represents configuration as stored in /etc/nix/nix.conf.
/// This list is not exhaustive, feel free to add more.
#[derive(Clone, Debug, Default, Eq, PartialEq)]
pub struct NixConfig<'a> {
allowed_users: Option<Vec<&'a str>>,
auto_optimise_store: Option<bool>,
cores: Option<u64>,
max_jobs: Option<u64>,
require_sigs: Option<bool>,
sandbox: Option<SandboxSetting>,
sandbox_fallback: Option<bool>,
substituters: Option<Vec<&'a str>>,
system_features: Option<Vec<&'a str>>,
trusted_public_keys: Option<Vec<crate::narinfo::PubKey>>,
trusted_substituters: Option<Vec<&'a str>>,
trusted_users: Option<Vec<&'a str>>,
extra_platforms: Option<Vec<&'a str>>,
extra_sandbox_paths: Option<Vec<&'a str>>,
experimental_features: Option<Vec<&'a str>>,
builders_use_substitutes: Option<bool>,
}
impl<'a> NixConfig<'a> {
/// Parses configuration from a file like `/etc/nix/nix.conf`, returning
/// a [NixConfig] with all values contained in there.
/// It does not support parsing multiple config files, merging semantics,
/// and also does not understand `include` and `!include` statements.
pub fn parse(input: &'a str) -> Result<Self, Error> {
let mut out = Self::default();
for line in input.lines() {
// strip comments at the end of the line
let line = if let Some((line, _comment)) = line.split_once('#') {
line
} else {
line
};
// skip comments and empty lines
if line.trim().is_empty() {
continue;
}
let (tag, val) = line
.split_once('=')
.ok_or_else(|| Error::InvalidLine(line.to_string()))?;
// trim whitespace
let tag = tag.trim();
let val = val.trim();
#[inline]
fn parse_val<'a>(this: &mut NixConfig<'a>, tag: &str, val: &'a str) -> Option<()> {
match tag {
"allowed-users" => {
this.allowed_users = Some(val.split_whitespace().collect());
}
"auto-optimise-store" => {
this.auto_optimise_store = Some(val.parse::<bool>().ok()?);
}
"cores" => {
this.cores = Some(val.parse().ok()?);
}
"max-jobs" => {
this.max_jobs = Some(val.parse().ok()?);
}
"require-sigs" => {
this.require_sigs = Some(val.parse().ok()?);
}
"sandbox" => this.sandbox = Some(val.parse().ok()?),
"sandbox-fallback" => this.sandbox_fallback = Some(val.parse().ok()?),
"substituters" => this.substituters = Some(val.split_whitespace().collect()),
"system-features" => {
this.system_features = Some(val.split_whitespace().collect())
}
"trusted-public-keys" => {
this.trusted_public_keys = Some(
val.split_whitespace()
.map(crate::narinfo::PubKey::parse)
.collect::<Result<Vec<crate::narinfo::PubKey>, _>>()
.ok()?,
)
}
"trusted-substituters" => {
this.trusted_substituters = Some(val.split_whitespace().collect())
}
"trusted-users" => this.trusted_users = Some(val.split_whitespace().collect()),
"extra-platforms" => {
this.extra_platforms = Some(val.split_whitespace().collect())
}
"extra-sandbox-paths" => {
this.extra_sandbox_paths = Some(val.split_whitespace().collect())
}
"experimental-features" => {
this.experimental_features = Some(val.split_whitespace().collect())
}
"builders-use-substitutes" => {
this.builders_use_substitutes = Some(val.parse().ok()?)
}
_ => return None,
}
Some(())
}
parse_val(&mut out, tag, val)
.ok_or_else(|| Error::InvalidValue(tag.to_string(), val.to_string()))?
}
Ok(out)
}
}
#[derive(thiserror::Error, Debug)]
pub enum Error {
#[error("Invalid line: {0}")]
InvalidLine(String),
#[error("Unrecognized key: {0}")]
UnrecognizedKey(String),
#[error("Invalid value '{1}' for key '{0}'")]
InvalidValue(String, String),
}
/// Valid values for the Nix 'sandbox' setting
#[derive(Clone, Debug, PartialEq, Eq)]
pub enum SandboxSetting {
True,
False,
Relaxed,
}
impl Display for SandboxSetting {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
match self {
SandboxSetting::True => write!(f, "true"),
SandboxSetting::False => write!(f, "false"),
SandboxSetting::Relaxed => write!(f, "relaxed"),
}
}
}
impl FromStr for SandboxSetting {
type Err = &'static str;
fn from_str(s: &str) -> Result<Self, Self::Err> {
Ok(match s {
"true" => Self::True,
"false" => Self::False,
"relaxed" => Self::Relaxed,
_ => return Err("invalid value"),
})
}
}
#[cfg(test)]
mod tests {
use crate::{narinfo::PubKey, nixcpp::conf::SandboxSetting};
use super::NixConfig;
#[test]
pub fn test_parse() {
let config = NixConfig::parse(include_str!("../../testdata/nix.conf")).expect("must parse");
assert_eq!(
NixConfig {
allowed_users: Some(vec!["*"]),
auto_optimise_store: Some(false),
cores: Some(0),
max_jobs: Some(8),
require_sigs: Some(true),
sandbox: Some(SandboxSetting::True),
sandbox_fallback: Some(false),
substituters: Some(vec!["https://nix-community.cachix.org", "https://cache.nixos.org/"]),
system_features: Some(vec!["nixos-test", "benchmark", "big-parallel", "kvm"]),
trusted_public_keys: Some(vec![
PubKey::parse("cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=")
.expect("failed to parse pubkey"),
PubKey::parse("nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=")
.expect("failed to parse pubkey")
]),
trusted_substituters: Some(vec![]),
trusted_users: Some(vec!["flokli"]),
extra_platforms: Some(vec!["aarch64-linux", "i686-linux"]),
extra_sandbox_paths: Some(vec![
"/run/binfmt", "/nix/store/swwyxyqpazzvbwx8bv40z7ih144q841f-qemu-aarch64-binfmt-P-x86_64-unknown-linux-musl"
]),
experimental_features: Some(vec!["nix-command"]),
builders_use_substitutes: Some(true)
},
config
);
// parse a config file using some non-space whitespaces, as well as comments right after the lines.
// ensure it contains the same data as initially parsed.
let other_config = NixConfig::parse(include_str!("../../testdata/other_nix.conf"))
.expect("other config must parse");
assert_eq!(config, other_config);
}
}

View file

@ -0,0 +1,9 @@
//! Contains code parsing some of the Nixcpp config files etc.
//! left by Nix *on the local disk*.
//!
//! This is only for Nix' own state/config.
//!
//! More "standardized" protocols, like parts of the Nix HTTP Binary Cache
//! protocol live elsewhere.
pub mod conf;

20
tvix/nix-compat/testdata/nix.conf vendored Normal file
View file

@ -0,0 +1,20 @@
# WARNING: this file is generated from the nix.* options in
# your NixOS configuration, typically
# /etc/nixos/configuration.nix. Do not edit it!
allowed-users = *
auto-optimise-store = false
cores = 0
max-jobs = 8
require-sigs = true
sandbox = true
sandbox-fallback = false
substituters = https://nix-community.cachix.org https://cache.nixos.org/
system-features = nixos-test benchmark big-parallel kvm
trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
trusted-substituters =
trusted-users = flokli
extra-platforms = aarch64-linux i686-linux
extra-sandbox-paths = /run/binfmt /nix/store/swwyxyqpazzvbwx8bv40z7ih144q841f-qemu-aarch64-binfmt-P-x86_64-unknown-linux-musl
experimental-features = nix-command
builders-use-substitutes = true

18
tvix/nix-compat/testdata/other_nix.conf vendored Normal file
View file

@ -0,0 +1,18 @@
# This file contains some more comments in various places.
allowed-users = *
auto-optimise-store = false
cores = 0
max-jobs = 8
require-sigs = true
sandbox=true
sandbox-fallback = false
substituters = https://nix-community.cachix.org https://cache.nixos.org/ #comment # stillcomment
system-features = nixos-test benchmark big-parallel kvm
trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
trusted-substituters =
trusted-users = flokli
extra-platforms = aarch64-linux i686-linux
extra-sandbox-paths = /run/binfmt /nix/store/swwyxyqpazzvbwx8bv40z7ih144q841f-qemu-aarch64-binfmt-P-x86_64-unknown-linux-musl
experimental-features = nix-command
builders-use-substitutes = true