···
-
import ./make-test-python.nix (
-
meta = with pkgs.lib.maintainers; {
-
maintainers = [ martinetd ];
-
services.logrotate.enable = true;
-
configFile = pkgs.writeText "logrotate.conf" ''
-
# self-written config file
-
su notarealuser notagroupeither
-
imports = [ importTest ];
-
# remove default frequency header and add another
-
# extra global setting... affecting nothing
-
# using mail somewhere should add --mail to logrotate invocation
-
mail = "user@domain.tld";
-
# postrotate should be suffixed by 'endscript'
-
postrotate = "touch /dev/null";
-
# check checkConfig works as expected: there is nothing to check here
-
# except that the file build passes
-
createolddir = "0750 root utmp";
-
"create " = "0750 root utmp";
-
# multiple paths should be aggregated
-
# overriding imported path should keep existing attributes
-
# (e.g. olddir is still set)
-
with subtest("whether logrotate works"):
-
# we must rotate once first to create logrotate stamp
-
defaultMachine.succeed("systemctl start logrotate.service")
-
# we need to wait for console text once here to
-
# clear console buffer up to this point for next wait
-
defaultMachine.wait_for_console_text('logrotate.service: Deactivated successfully')
-
defaultMachine.succeed(
-
# wtmp is present in default config.
-
"rm -f /var/log/wtmp*",
-
# we need to give it at least 1MB
-
"dd if=/dev/zero of=/var/log/wtmp bs=2M count=1",
-
# move into the future and check rotation.
-
"date -s 'now + 1 month + 1 day'")
-
defaultMachine.wait_for_console_text('logrotate.service: Deactivated successfully')
-
defaultMachine.succeed(
-
"[ -e /var/log/wtmp.1 ]",
-
with subtest("default config does not have mail"):
-
defaultMachine.fail("systemctl cat logrotate.service | grep -- --mail")
-
with subtest("using mails adds mail option"):
-
machine.succeed("systemctl cat logrotate.service | grep -- --mail")
-
with subtest("check generated config matches expectation"):
-
# copy conf to /tmp/logrotate.conf for easy grep
-
"conf=$(systemctl cat logrotate | grep -oE '/nix/store[^ ]*logrotate.conf'); cp $conf /tmp/logrotate.conf",
-
"! grep weekly /tmp/logrotate.conf",
-
"grep -E '^delaycompress' /tmp/logrotate.conf",
-
"tail -n 1 /tmp/logrotate.conf | grep shred",
-
"sed -ne '/\"sendmail\" {/,/}/p' /tmp/logrotate.conf | grep 'mail user@domain.tld'",
-
"sed -ne '/\"postrotate\" {/,/}/p' /tmp/logrotate.conf | grep endscript",
-
"grep '\"file1\"\n\"file2\" {' /tmp/logrotate.conf",
-
"sed -ne '/\"import\" {/,/}/p' /tmp/logrotate.conf | grep noolddir",
-
# also check configFile option
-
failingMachine.succeed(
-
"conf=$(systemctl cat logrotate | grep -oE '/nix/store[^ ]*logrotate.conf'); cp $conf /tmp/logrotate.conf",
-
"grep 'self-written config' /tmp/logrotate.conf",
-
with subtest("Check logrotate-checkconf service"):
-
machine.wait_for_unit("logrotate-checkconf.service")
-
# wait_for_unit also asserts for success, so wait for
-
# parent target instead and check manually.
-
failingMachine.wait_for_unit("multi-user.target")
-
info = failingMachine.get_unit_info("logrotate-checkconf.service")
-
if info["ActiveState"] != "failed":
-
raise Exception('logrotate-checkconf.service was not failed')
-
machine.log(machine.execute("systemd-analyze security logrotate.service | grep -v ✓")[1])