···

       
93
       
 
       
in rec {

     

       
94
       
 
       
  inherit optionsNix;

     

       
95
       
 
       


     

       
96
       
-
       
  optionsAsciiDoc = pkgs.runCommand "options.adoc" {

     

       
97
       
-
       
    nativeBuildInputs = [ pkgs.python3Minimal ];

     

       
98
       
-
       
  } ''

     

       
99
       
-
       
    python ${./generateDoc.py} \

     

       
100
       
 
       
      --format asciidoc \

     

       
101
       
 
       
      ${optionsJSON}/share/doc/nixos/options.json \

     

       
102
       
 
       
      > $out

     

       
103
       
 
       
  '';

     

       
104
       
 
       


     

       
105
       
-
       
  optionsCommonMark = pkgs.runCommand "options.md" {

     

       
106
       
-
       
    nativeBuildInputs = [ pkgs.python3Minimal ];

     

       
107
       
-
       
  } ''

     

       
108
       
-
       
    python ${./generateDoc.py} \

     

       
109
       
 
       
      --format commonmark \

     

       
110
       
 
       
      ${optionsJSON}/share/doc/nixos/options.json \

     

       
111
       
 
       
      > $out

     
···

       
157
       
 
       
  # Convert options.json into an XML file.

     

       
158
       
 
       
  # The actual generation of the xml file is done in nix purely for the convenience

     

       
159
       
 
       
  # of not having to generate the xml some other way

     

       
160
       
-
       
  optionsXML = pkgs.runCommand "options.xml" {

     

       
161
       
-
       
    nativeBuildInputs = with pkgs; [ nix ];

     

       
162
       
-
       
  } ''

     

       
163
       
 
       
    export NIX_STORE_DIR=$TMPDIR/store

     

       
164
       
 
       
    export NIX_STATE_DIR=$TMPDIR/state

     

       
165
       
-
       
    nix-instantiate \

     

       
166
       
 
       
      --eval --xml --strict ${./optionsJSONtoXML.nix} \

     

       
167
       
 
       
      --argstr file ${optionsJSON}/share/doc/nixos/options.json \

     

       
168
       
 
       
      > "$out"

     

       
169
       
 
       
  '';

     

       
170
       
 
       


     

       
171
       
-
       
  optionsDocBook = pkgs.runCommand "options-docbook.xml" {

     

       
172
       
-
       
    nativeBuildInputs = with pkgs; [ libxslt.bin libxslt.bin python3Minimal ];

     

       
173
       
-
       
  } ''

     

       
174
       
 
       
    optionsXML=${optionsXML}

     

       
175
       
 
       
    if grep /nixpkgs/nixos/modules $optionsXML; then

     

       
176
       
 
       
      echo "The manual appears to depend on the location of Nixpkgs, which is bad"

     
···

       
180
       
 
       
      exit 1

     

       
181
       
 
       
    fi

     

       
182
       
 
       


     

       
183
       
-
       
    python ${./sortXML.py} $optionsXML sorted.xml

     

       
184
       
-
       
    xsltproc \

     

       
185
       
 
       
      --stringparam documentType '${documentType}' \

     

       
186
       
 
       
      --stringparam revision '${revision}' \

     

       
187
       
 
       
      --stringparam variablelistId '${variablelistId}' \

     

       
188
       
 
       
      --stringparam optionIdPrefix '${optionIdPrefix}' \

     

       
189
       
 
       
      -o intermediate.xml ${./options-to-docbook.xsl} sorted.xml

     

       
190
       
-
       
    xsltproc \

     

       
191
       
 
       
      -o "$out" ${./postprocess-option-descriptions.xsl} intermediate.xml

     

       
192
       
 
       
  '';

     

       
193
       
 
       
}

     

···

       
93
       
 
       
in rec {

     

       
94
       
 
       
  inherit optionsNix;

     

       
95
       
 
       


     

       
96
       
+
       
  optionsAsciiDoc = pkgs.runCommand "options.adoc" {} ''

     

       
97
       
+
       
    ${pkgs.python3Minimal}/bin/python ${./generateDoc.py} \

     

       
0
       
 
       

     

       
0
       
 
       

     

       
98
       
 
       
      --format asciidoc \

     

       
99
       
 
       
      ${optionsJSON}/share/doc/nixos/options.json \

     

       
100
       
 
       
      > $out

     

       
101
       
 
       
  '';

     

       
102
       
 
       


     

       
103
       
+
       
  optionsCommonMark = pkgs.runCommand "options.md" {} ''

     

       
104
       
+
       
    ${pkgs.python3Minimal}/bin/python ${./generateDoc.py} \

     

       
0
       
 
       

     

       
0
       
 
       

     

       
105
       
 
       
      --format commonmark \

     

       
106
       
 
       
      ${optionsJSON}/share/doc/nixos/options.json \

     

       
107
       
 
       
      > $out

     
···

       
153
       
 
       
  # Convert options.json into an XML file.

     

       
154
       
 
       
  # The actual generation of the xml file is done in nix purely for the convenience

     

       
155
       
 
       
  # of not having to generate the xml some other way

     

       
156
       
+
       
  optionsXML = pkgs.runCommand "options.xml" {} ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
157
       
 
       
    export NIX_STORE_DIR=$TMPDIR/store

     

       
158
       
 
       
    export NIX_STATE_DIR=$TMPDIR/state

     

       
159
       
+
       
    ${pkgs.nix}/bin/nix-instantiate \

     

       
160
       
 
       
      --eval --xml --strict ${./optionsJSONtoXML.nix} \

     

       
161
       
 
       
      --argstr file ${optionsJSON}/share/doc/nixos/options.json \

     

       
162
       
 
       
      > "$out"

     

       
163
       
 
       
  '';

     

       
164
       
 
       


     

       
165
       
+
       
  optionsDocBook = pkgs.runCommand "options-docbook.xml" {} ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
166
       
 
       
    optionsXML=${optionsXML}

     

       
167
       
 
       
    if grep /nixpkgs/nixos/modules $optionsXML; then

     

       
168
       
 
       
      echo "The manual appears to depend on the location of Nixpkgs, which is bad"

     
···

       
172
       
 
       
      exit 1

     

       
173
       
 
       
    fi

     

       
174
       
 
       


     

       
175
       
+
       
    ${pkgs.python3Minimal}/bin/python ${./sortXML.py} $optionsXML sorted.xml

     

       
176
       
+
       
    ${pkgs.libxslt.bin}/bin/xsltproc \

     

       
177
       
 
       
      --stringparam documentType '${documentType}' \

     

       
178
       
 
       
      --stringparam revision '${revision}' \

     

       
179
       
 
       
      --stringparam variablelistId '${variablelistId}' \

     

       
180
       
 
       
      --stringparam optionIdPrefix '${optionIdPrefix}' \

     

       
181
       
 
       
      -o intermediate.xml ${./options-to-docbook.xsl} sorted.xml

     

       
182
       
+
       
    ${pkgs.libxslt.bin}/bin/xsltproc \

     

       
183
       
 
       
      -o "$out" ${./postprocess-option-descriptions.xsl} intermediate.xml

     

       
184
       
 
       
  '';

     

       
185
       
 
       
}

     

···

       
18
       
 
       
  interactiveDriver = (testing.makeTest { inherit nodes; name = "network"; testScript = "start_all(); join_all();"; }).test.driverInteractive;

     

       
19
       
 
       
in

     

       
20
       
 
       


     

       
21
       
-
       
  pkgs.runCommandLocal "nixos-build-vms" {

     

       
22
       
-
       
    nativeBuildInputs = [ pkgs.makeWrapper ];

     

       
23
       
-
       
  } ''

     

       
24
       
 
       
  mkdir -p $out/bin

     

       
25
       
 
       
  ln -s ${interactiveDriver}/bin/nixos-test-driver $out/bin/nixos-test-driver

     

       
26
       
 
       
  ln -s ${interactiveDriver}/bin/nixos-test-driver $out/bin/nixos-run-vms

     

···

       
18
       
 
       
  interactiveDriver = (testing.makeTest { inherit nodes; name = "network"; testScript = "start_all(); join_all();"; }).test.driverInteractive;

     

       
19
       
 
       
in

     

       
20
       
 
       


     

       
21
       
+
       


     

       
22
       
+
       
pkgs.runCommand "nixos-build-vms" { nativeBuildInputs = [ pkgs.makeWrapper ]; } ''

     

       
0
       
 
       

     

       
23
       
 
       
  mkdir -p $out/bin

     

       
24
       
 
       
  ln -s ${interactiveDriver}/bin/nixos-test-driver $out/bin/nixos-test-driver

     

       
25
       
 
       
  ln -s ${interactiveDriver}/bin/nixos-test-driver $out/bin/nixos-run-vms

     

···

       
77
       
 
       
          pkgsLibPath = filter (pkgs.path + "/pkgs/pkgs-lib");

     

       
78
       
 
       
          nixosPath = filter (pkgs.path + "/nixos");

     

       
79
       
 
       
          modules = map (p: ''"${removePrefix "${modulesPath}/" (toString p)}"'') docModules.lazy;

     

       
80
       
-
       
          nativeBuildInputs = with pkgs; [ nix ];

     

       
81
       
 
       
        } ''

     

       
82
       
 
       
          export NIX_STORE_DIR=$TMPDIR/store

     

       
83
       
 
       
          export NIX_STATE_DIR=$TMPDIR/state

     

       
84
       
-
       
          nix-instantiate \

     

       
85
       
 
       
            --show-trace \

     

       
86
       
 
       
            --eval --json --strict \

     

       
87
       
 
       
            --argstr libPath "$libPath" \

     

···

       
77
       
 
       
          pkgsLibPath = filter (pkgs.path + "/pkgs/pkgs-lib");

     

       
78
       
 
       
          nixosPath = filter (pkgs.path + "/nixos");

     

       
79
       
 
       
          modules = map (p: ''"${removePrefix "${modulesPath}/" (toString p)}"'') docModules.lazy;

     

       
0
       
 
       

     

       
80
       
 
       
        } ''

     

       
81
       
 
       
          export NIX_STORE_DIR=$TMPDIR/store

     

       
82
       
 
       
          export NIX_STATE_DIR=$TMPDIR/state

     

       
83
       
+
       
          ${pkgs.buildPackages.nix}/bin/nix-instantiate \

     

       
84
       
 
       
            --show-trace \

     

       
85
       
 
       
            --eval --json --strict \

     

       
86
       
 
       
            --argstr libPath "$libPath" \

     

···

       
27
       
 
       
              popd

     

       
28
       
 
       
            '';

     

       
29
       
 
       
          diskImageBase = "nixos-image-${config.system.nixos.label}-${pkgs.stdenv.hostPlatform.system}.raw";

     

       
30
       
-
       
          nativeBuildInputs = with pkgs; [ e2fsprogs parted ];

     

       
31
       
-
       
          buildInputs = with pkgs; [ util-linux perl ];

     

       
32
       
-
       
          exportReferencesGraph = [ "closure" config.system.build.toplevel ];

     

       
33
       
 
       
        }

     

       
34
       
 
       
        ''

     

       
35
       
 
       
          # Create partition table

     

       
36
       
-
       
          parted --script /dev/vda mklabel msdos

     

       
37
       
-
       
          parted --script /dev/vda mkpart primary ext4 1 ${diskSize}

     

       
38
       
-
       
          parted --script /dev/vda print

     

       
39
       
 
       
          . /sys/class/block/vda1/uevent

     

       
40
       
 
       
          mknod /dev/vda1 b $MAJOR $MINOR

     

       
41
       
 
       


     

       
42
       
 
       
          # Create an empty filesystem and mount it.

     

       
43
       
-
       
          mkfs.ext4 -L nixos /dev/vda1

     

       
44
       
-
       
          tune2fs -c 0 -i 0 /dev/vda1

     

       
45
       
 
       


     

       
46
       
 
       
          mkdir /mnt

     

       
47
       
 
       
          mount /dev/vda1 /mnt

     

···

       
27
       
 
       
              popd

     

       
28
       
 
       
            '';

     

       
29
       
 
       
          diskImageBase = "nixos-image-${config.system.nixos.label}-${pkgs.stdenv.hostPlatform.system}.raw";

     

       
30
       
+
       
          buildInputs = [ pkgs.util-linux pkgs.perl ];

     

       
31
       
+
       
          exportReferencesGraph =

     

       
32
       
+
       
            [ "closure" config.system.build.toplevel ];

     

       
33
       
 
       
        }

     

       
34
       
 
       
        ''

     

       
35
       
 
       
          # Create partition table

     

       
36
       
+
       
          ${pkgs.parted}/sbin/parted --script /dev/vda mklabel msdos

     

       
37
       
+
       
          ${pkgs.parted}/sbin/parted --script /dev/vda mkpart primary ext4 1 ${diskSize}

     

       
38
       
+
       
          ${pkgs.parted}/sbin/parted --script /dev/vda print

     

       
39
       
 
       
          . /sys/class/block/vda1/uevent

     

       
40
       
 
       
          mknod /dev/vda1 b $MAJOR $MINOR

     

       
41
       
 
       


     

       
42
       
 
       
          # Create an empty filesystem and mount it.

     

       
43
       
+
       
          ${pkgs.e2fsprogs}/sbin/mkfs.ext4 -L nixos /dev/vda1

     

       
44
       
+
       
          ${pkgs.e2fsprogs}/sbin/tune2fs -c 0 -i 0 /dev/vda1

     

       
45
       
 
       


     

       
46
       
 
       
          mkdir /mnt

     

       
47
       
 
       
          mount /dev/vda1 /mnt

     

···

       
218
       
 
       
                chmod 0644 $efiVars

     

       
219
       
 
       
              '' else ""}

     

       
220
       
 
       
            '';

     

       
221
       
-
       
          nativeBuildInputs = with pkgs; [ dosfstools gptfdisk kmod mtools ];

     

       
222
       
-
       
          buildInputs = with pkgs; [ util-linux ];

     

       
223
       
 
       
          QEMU_OPTS = "-nographic -serial stdio -monitor none"

     

       
224
       
 
       
                      + lib.optionalString cfg.useEFIBoot (

     

       
225
       
 
       
                        " -drive if=pflash,format=raw,unit=0,readonly=on,file=${cfg.efi.firmware}"

     
···

       
227
       
 
       
        }

     

       
228
       
 
       
        ''

     

       
229
       
 
       
          # Create a /boot EFI partition with 60M and arbitrary but fixed GUIDs for reproducibility

     

       
230
       
-
       
          sgdisk \

     

       
231
       
 
       
            --set-alignment=1 --new=1:34:2047 --change-name=1:BIOSBootPartition --typecode=1:ef02 \

     

       
232
       
 
       
            --set-alignment=512 --largest-new=2 --change-name=2:EFISystem --typecode=2:ef00 \

     

       
233
       
 
       
            --attributes=1:set:1 \

     
···

       
250
       
 
       
            ''

     

       
251
       
 
       
          }

     

       
252
       
 
       


     

       
253
       
-
       
          mkfs.fat -F16 /dev/vda2

     

       
254
       
 
       
          export MTOOLS_SKIP_CHECK=1

     

       
255
       
-
       
          mlabel -i /dev/vda2 ::boot

     

       
256
       
 
       


     

       
257
       
 
       
          # Mount /boot; load necessary modules first.

     

       
258
       
-
       
          insmod ${pkgs.linux}/lib/modules/*/kernel/fs/nls/nls_cp437.ko.xz || true

     

       
259
       
-
       
          insmod ${pkgs.linux}/lib/modules/*/kernel/fs/nls/nls_iso8859-1.ko.xz || true

     

       
260
       
-
       
          insmod ${pkgs.linux}/lib/modules/*/kernel/fs/fat/fat.ko.xz || true

     

       
261
       
-
       
          insmod ${pkgs.linux}/lib/modules/*/kernel/fs/fat/vfat.ko.xz || true

     

       
262
       
-
       
          insmod ${pkgs.linux}/lib/modules/*/kernel/fs/efivarfs/efivarfs.ko.xz || true

     

       
263
       
 
       
          mkdir /boot

     

       
264
       
 
       
          mount /dev/vda2 /boot

     

       
265
       
 
       


     

···

       
218
       
 
       
                chmod 0644 $efiVars

     

       
219
       
 
       
              '' else ""}

     

       
220
       
 
       
            '';

     

       
221
       
+
       
          buildInputs = [ pkgs.util-linux ];

     

       
0
       
 
       

     

       
222
       
 
       
          QEMU_OPTS = "-nographic -serial stdio -monitor none"

     

       
223
       
 
       
                      + lib.optionalString cfg.useEFIBoot (

     

       
224
       
 
       
                        " -drive if=pflash,format=raw,unit=0,readonly=on,file=${cfg.efi.firmware}"

     
···

       
226
       
 
       
        }

     

       
227
       
 
       
        ''

     

       
228
       
 
       
          # Create a /boot EFI partition with 60M and arbitrary but fixed GUIDs for reproducibility

     

       
229
       
+
       
          ${pkgs.gptfdisk}/bin/sgdisk \

     

       
230
       
 
       
            --set-alignment=1 --new=1:34:2047 --change-name=1:BIOSBootPartition --typecode=1:ef02 \

     

       
231
       
 
       
            --set-alignment=512 --largest-new=2 --change-name=2:EFISystem --typecode=2:ef00 \

     

       
232
       
 
       
            --attributes=1:set:1 \

     
···

       
249
       
 
       
            ''

     

       
250
       
 
       
          }

     

       
251
       
 
       


     

       
252
       
+
       
          ${pkgs.dosfstools}/bin/mkfs.fat -F16 /dev/vda2

     

       
253
       
 
       
          export MTOOLS_SKIP_CHECK=1

     

       
254
       
+
       
          ${pkgs.mtools}/bin/mlabel -i /dev/vda2 ::boot

     

       
255
       
 
       


     

       
256
       
 
       
          # Mount /boot; load necessary modules first.

     

       
257
       
+
       
          ${pkgs.kmod}/bin/insmod ${pkgs.linux}/lib/modules/*/kernel/fs/nls/nls_cp437.ko.xz || true

     

       
258
       
+
       
          ${pkgs.kmod}/bin/insmod ${pkgs.linux}/lib/modules/*/kernel/fs/nls/nls_iso8859-1.ko.xz || true

     

       
259
       
+
       
          ${pkgs.kmod}/bin/insmod ${pkgs.linux}/lib/modules/*/kernel/fs/fat/fat.ko.xz || true

     

       
260
       
+
       
          ${pkgs.kmod}/bin/insmod ${pkgs.linux}/lib/modules/*/kernel/fs/fat/vfat.ko.xz || true

     

       
261
       
+
       
          ${pkgs.kmod}/bin/insmod ${pkgs.linux}/lib/modules/*/kernel/fs/efivarfs/efivarfs.ko.xz || true

     

       
262
       
 
       
          mkdir /boot

     

       
263
       
 
       
          mount /dev/vda2 /boot

     

       
264
       
 
       


     

···

       
1
       
 
       
import ./make-test-python.nix ({ pkgs, ... }:

     

       
2
       
 
       
  let

     

       
3
       
-
       
    test-certificates = pkgs.runCommandLocal "test-certificates" {

     

       
4
       
-
       
      nativeBuildInputs = with pkgs; [ step-cli ];

     

       
5
       
-
       
    } ''

     

       
6
       
 
       
      mkdir -p $out

     

       
7
       
 
       
      echo insecure-root-password > $out/root-password-file

     

       
8
       
 
       
      echo insecure-intermediate-password > $out/intermediate-password-file

     

       
9
       
-
       
      step certificate create "Example Root CA" $out/root_ca.crt $out/root_ca.key --password-file=$out/root-password-file --profile root-ca

     

       
10
       
-
       
      step certificate create "Example Intermediate CA 1" $out/intermediate_ca.crt $out/intermediate_ca.key --password-file=$out/intermediate-password-file --ca-password-file=$out/root-password-file --profile intermediate-ca --ca $out/root_ca.crt --ca-key $out/root_ca.key

     

       
11
       
 
       
    '';

     

       
12
       
 
       
  in

     

       
13
       
 
       
  {

     

···

       
1
       
 
       
import ./make-test-python.nix ({ pkgs, ... }:

     

       
2
       
 
       
  let

     

       
3
       
+
       
    test-certificates = pkgs.runCommandLocal "test-certificates" { } ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
4
       
 
       
      mkdir -p $out

     

       
5
       
 
       
      echo insecure-root-password > $out/root-password-file

     

       
6
       
 
       
      echo insecure-intermediate-password > $out/intermediate-password-file

     

       
7
       
+
       
      ${pkgs.step-cli}/bin/step certificate create "Example Root CA" $out/root_ca.crt $out/root_ca.key --password-file=$out/root-password-file --profile root-ca

     

       
8
       
+
       
      ${pkgs.step-cli}/bin/step certificate create "Example Intermediate CA 1" $out/intermediate_ca.crt $out/intermediate_ca.key --password-file=$out/intermediate-password-file --ca-password-file=$out/root-password-file --profile intermediate-ca --ca $out/root_ca.crt --ca-key $out/root_ca.key

     

       
9
       
 
       
    '';

     

       
10
       
 
       
  in

     

       
11
       
 
       
  {