commit 1fe7725039725c7bf9d198cf0136edac9e7a85a1 · pyrox.dev/nixpkgs

+1 -1

nixos/tests/all-tests.nix

···

       306
       306
        
           "x86_64-linux"

     

       307
       307
        
         ] ./ceph-single-node-bluestore-dmcrypt.nix;

     

       308
       308
        
         certmgr = import ./certmgr.nix { inherit pkgs runTest; };

     

       309
       309
       -
         cfssl = handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./cfssl.nix { };

     

       309
       309
       +
         cfssl = runTestOn [ "aarch64-linux" "x86_64-linux" ] ./cfssl.nix;

     

       310
       310
        
         cgit = runTest ./cgit.nix;

     

       311
       311
        
         charliecloud = runTest ./charliecloud.nix;

     

       312
       312
        
         chromadb = runTest ./chromadb.nix;

+81 -83

nixos/tests/cfssl.nix

···

       1
       1
       -
       import ./make-test-python.nix (

     

       2
       2
       -
         { pkgs, ... }:

     

       3
       3
       -
         {

     

       4
       4
       -
           name = "cfssl";

     

       1
       1
       +
       { pkgs, ... }:

     

       2
       2
       +
       {

     

       3
       3
       +
         name = "cfssl";

     

       5
       4
        
       

     

       6
       6
       -
           nodes.machine =

     

       7
       7
       -
             {

     

       8
       8
       -
               config,

     

       9
       9
       -
               lib,

     

       10
       10
       -
               pkgs,

     

       11
       11
       -
               ...

     

       12
       12
       -
             }:

     

       13
       13
       -
             {

     

       14
       14
       -
               networking.firewall.allowedTCPPorts = [ config.services.cfssl.port ];

     

       5
       5
       +
         nodes.machine =

     

       6
       6
       +
           {

     

       7
       7
       +
             config,

     

       8
       8
       +
             lib,

     

       9
       9
       +
             pkgs,

     

       10
       10
       +
             ...

     

       11
       11
       +
           }:

     

       12
       12
       +
           {

     

       13
       13
       +
             networking.firewall.allowedTCPPorts = [ config.services.cfssl.port ];

     

       15
       14
        
       

     

       16
       16
       -
               services.cfssl.enable = true;

     

       17
       17
       -
               systemd.services.cfssl.after = [ "cfssl-init.service" ];

     

       15
       15
       +
             services.cfssl.enable = true;

     

       16
       16
       +
             systemd.services.cfssl.after = [ "cfssl-init.service" ];

     

       18
       17
        
       

     

       19
       19
       -
               systemd.services.cfssl-init = {

     

       20
       20
       -
                 description = "Initialize the cfssl CA";

     

       21
       21
       -
                 wantedBy = [ "multi-user.target" ];

     

       22
       22
       -
                 serviceConfig = {

     

       23
       23
       -
                   User = "cfssl";

     

       24
       24
       -
                   Type = "oneshot";

     

       25
       25
       -
                   WorkingDirectory = config.services.cfssl.dataDir;

     

       26
       26
       -
                 };

     

       27
       27
       -
                 script = with pkgs; ''

     

       28
       28
       -
                   ${cfssl}/bin/cfssl genkey -initca ${

     

       29
       29
       -
                     pkgs.writeText "ca.json" (

     

       30
       30
       -
                       builtins.toJSON {

     

       31
       31
       -
                         hosts = [ "ca.example.com" ];

     

       32
       32
       -
                         key = {

     

       33
       33
       -
                           algo = "rsa";

     

       34
       34
       -
                           size = 4096;

     

       35
       35
       -
                         };

     

       36
       36
       -
                         names = [

     

       37
       37
       -
                           {

     

       38
       38
       -
                             C = "US";

     

       39
       39
       -
                             L = "San Francisco";

     

       40
       40
       -
                             O = "Internet Widgets, LLC";

     

       41
       41
       -
                             OU = "Certificate Authority";

     

       42
       42
       -
                             ST = "California";

     

       43
       43
       -
                           }

     

       44
       44
       -
                         ];

     

       45
       45
       -
                       }

     

       46
       46
       -
                     )

     

       47
       47
       -
                   } | ${cfssl}/bin/cfssljson -bare ca

     

       48
       48
       -
                 '';

     

       18
       18
       +
             systemd.services.cfssl-init = {

     

       19
       19
       +
               description = "Initialize the cfssl CA";

     

       20
       20
       +
               wantedBy = [ "multi-user.target" ];

     

       21
       21
       +
               serviceConfig = {

     

       22
       22
       +
                 User = "cfssl";

     

       23
       23
       +
                 Type = "oneshot";

     

       24
       24
       +
                 WorkingDirectory = config.services.cfssl.dataDir;

     

       49
       25
        
               };

     

       26
       26
       +
               script = with pkgs; ''

     

       27
       27
       +
                 ${cfssl}/bin/cfssl genkey -initca ${

     

       28
       28
       +
                   pkgs.writeText "ca.json" (

     

       29
       29
       +
                     builtins.toJSON {

     

       30
       30
       +
                       hosts = [ "ca.example.com" ];

     

       31
       31
       +
                       key = {

     

       32
       32
       +
                         algo = "rsa";

     

       33
       33
       +
                         size = 4096;

     

       34
       34
       +
                       };

     

       35
       35
       +
                       names = [

     

       36
       36
       +
                         {

     

       37
       37
       +
                           C = "US";

     

       38
       38
       +
                           L = "San Francisco";

     

       39
       39
       +
                           O = "Internet Widgets, LLC";

     

       40
       40
       +
                           OU = "Certificate Authority";

     

       41
       41
       +
                           ST = "California";

     

       42
       42
       +
                         }

     

       43
       43
       +
                       ];

     

       44
       44
       +
                     }

     

       45
       45
       +
                   )

     

       46
       46
       +
                 } | ${cfssl}/bin/cfssljson -bare ca

     

       47
       47
       +
               '';

     

       50
       48
        
             };

     

       49
       49
       +
           };

     

       51
       50
        
       

     

       52
       52
       -
           testScript =

     

       53
       53
       -
             let

     

       54
       54
       -
               cfsslrequest =

     

       55
       55
       -
                 with pkgs;

     

       56
       56
       -
                 writeScript "cfsslrequest" ''

     

       57
       57
       -
                   curl -f -X POST -H "Content-Type: application/json" -d @${csr} \

     

       58
       58
       -
                     http://localhost:8888/api/v1/cfssl/newkey | ${cfssl}/bin/cfssljson /tmp/certificate

     

       59
       59
       -
                 '';

     

       60
       60
       -
               csr = pkgs.writeText "csr.json" (

     

       61
       61
       -
                 builtins.toJSON {

     

       62
       62
       -
                   CN = "www.example.com";

     

       63
       63
       -
                   hosts = [

     

       64
       64
       -
                     "example.com"

     

       65
       65
       -
                     "www.example.com"

     

       66
       66
       -
                   ];

     

       67
       67
       -
                   key = {

     

       68
       68
       -
                     algo = "rsa";

     

       69
       69
       -
                     size = 2048;

     

       70
       70
       -
                   };

     

       71
       71
       -
                   names = [

     

       72
       72
       -
                     {

     

       73
       73
       -
                       C = "US";

     

       74
       74
       -
                       L = "San Francisco";

     

       75
       75
       -
                       O = "Example Company, LLC";

     

       76
       76
       -
                       OU = "Operations";

     

       77
       77
       -
                       ST = "California";

     

       78
       78
       -
                     }

     

       79
       79
       -
                   ];

     

       80
       80
       -
                 }

     

       81
       81
       -
               );

     

       82
       82
       -
             in

     

       83
       83
       -
             ''

     

       84
       84
       -
               machine.wait_for_unit("cfssl.service")

     

       85
       85
       -
               machine.wait_until_succeeds("${cfsslrequest}")

     

       86
       86
       -
               machine.succeed("ls /tmp/certificate-key.pem")

     

       87
       87
       -
             '';

     

       88
       88
       -
         }

     

       89
       89
       -
       )

     

       51
       51
       +
         testScript =

     

       52
       52
       +
           let

     

       53
       53
       +
             cfsslrequest =

     

       54
       54
       +
               with pkgs;

     

       55
       55
       +
               writeScript "cfsslrequest" ''

     

       56
       56
       +
                 curl -f -X POST -H "Content-Type: application/json" -d @${csr} \

     

       57
       57
       +
                   http://localhost:8888/api/v1/cfssl/newkey | ${cfssl}/bin/cfssljson /tmp/certificate

     

       58
       58
       +
               '';

     

       59
       59
       +
             csr = pkgs.writeText "csr.json" (

     

       60
       60
       +
               builtins.toJSON {

     

       61
       61
       +
                 CN = "www.example.com";

     

       62
       62
       +
                 hosts = [

     

       63
       63
       +
                   "example.com"

     

       64
       64
       +
                   "www.example.com"

     

       65
       65
       +
                 ];

     

       66
       66
       +
                 key = {

     

       67
       67
       +
                   algo = "rsa";

     

       68
       68
       +
                   size = 2048;

     

       69
       69
       +
                 };

     

       70
       70
       +
                 names = [

     

       71
       71
       +
                   {

     

       72
       72
       +
                     C = "US";

     

       73
       73
       +
                     L = "San Francisco";

     

       74
       74
       +
                     O = "Example Company, LLC";

     

       75
       75
       +
                     OU = "Operations";

     

       76
       76
       +
                     ST = "California";

     

       77
       77
       +
                   }

     

       78
       78
       +
                 ];

     

       79
       79
       +
               }

     

       80
       80
       +
             );

     

       81
       81
       +
           in

     

       82
       82
       +
           ''

     

       83
       83
       +
             machine.wait_for_unit("cfssl.service")

     

       84
       84
       +
             machine.wait_until_succeeds("${cfsslrequest}")

     

       85
       85
       +
             machine.succeed("ls /tmp/certificate-key.pem")

     

       86
       86
       +
           '';

     

       87
       87
       +
       }