commit 5a80e9ed00c25c43943a2019061fead22927016a · pyrox.dev/nixpkgs

+1 -1

nixos/tests/all-tests.nix

···

       575
       575
        
         kavita = handleTest ./kavita.nix {};

     

       576
       576
        
         kbd-setfont-decompress = handleTest ./kbd-setfont-decompress.nix {};

     

       577
       577
        
         kbd-update-search-paths-patch = handleTest ./kbd-update-search-paths-patch.nix {};

     

       578
       578
       -
         kea = handleTest ./kea.nix {};

     

       578
       578
       +
         kea = runTest ./kea.nix;

     

       579
       579
        
         keepalived = handleTest ./keepalived.nix {};

     

       580
       580
        
         keepassxc = handleTest ./keepassxc.nix {};

     

       581
       581
        
         kerberos = handleTest ./kerberos/default.nix {};

+186 -184

nixos/tests/kea.nix

···

       5
       5
        
       # that the nameserver can resolve the clients fqdn to the correct IP

     

       6
       6
        
       # address.

     

       7
       7
        
       

     

       8
       8
       -
       import ./make-test-python.nix (

     

       9
       9
       -
         { pkgs, lib, ... }:

     

       10
       10
       -
         {

     

       11
       11
       -
           meta.maintainers = with lib.maintainers; [ hexa ];

     

       8
       8
       +
       {

     

       9
       9
       +
         pkgs,

     

       10
       10
       +
         lib,

     

       11
       11
       +
         ...

     

       12
       12
       +
       }:

     

       13
       13
       +
       {

     

       14
       14
       +
         meta.maintainers = with lib.maintainers; [ hexa ];

     

       12
       15
        
       

     

       13
       13
       -
           name = "kea";

     

       16
       16
       +
         name = "kea";

     

       14
       17
        
       

     

       15
       15
       -
           nodes = {

     

       16
       16
       -
             router =

     

       17
       17
       -
               { config, pkgs, ... }:

     

       18
       18
       -
               {

     

       19
       19
       -
                 virtualisation.vlans = [ 1 ];

     

       18
       18
       +
         nodes = {

     

       19
       19
       +
           router =

     

       20
       20
       +
             { config, pkgs, ... }:

     

       21
       21
       +
             {

     

       22
       22
       +
               virtualisation.vlans = [ 1 ];

     

       20
       23
        
       

     

       21
       21
       -
                 networking = {

     

       22
       22
       -
                   useDHCP = false;

     

       23
       23
       -
                   firewall.allowedUDPPorts = [ 67 ];

     

       24
       24
       -
                 };

     

       24
       24
       +
               networking = {

     

       25
       25
       +
                 useDHCP = false;

     

       26
       26
       +
                 firewall.allowedUDPPorts = [ 67 ];

     

       27
       27
       +
               };

     

       25
       28
        
       

     

       26
       26
       -
                 systemd.network = {

     

       27
       27
       -
                   enable = true;

     

       28
       28
       -
                   networks = {

     

       29
       29
       -
                     "01-eth1" = {

     

       30
       30
       -
                       name = "eth1";

     

       31
       31
       -
                       networkConfig = {

     

       32
       32
       -
                         Address = "10.0.0.1/29";

     

       33
       33
       -
                       };

     

       29
       29
       +
               systemd.network = {

     

       30
       30
       +
                 enable = true;

     

       31
       31
       +
                 networks = {

     

       32
       32
       +
                   "01-eth1" = {

     

       33
       33
       +
                     name = "eth1";

     

       34
       34
       +
                     networkConfig = {

     

       35
       35
       +
                       Address = "10.0.0.1/29";

     

       34
       36
        
                     };

     

       35
       37
        
                   };

     

       36
       38
        
                 };

     

       39
       39
       +
               };

     

       37
       40
        
       

     

       38
       38
       -
                 services.kea.dhcp4 = {

     

       39
       39
       -
                   enable = true;

     

       40
       40
       -
                   settings = {

     

       41
       41
       -
                     valid-lifetime = 3600;

     

       42
       42
       -
                     renew-timer = 900;

     

       43
       43
       -
                     rebind-timer = 1800;

     

       41
       41
       +
               services.kea.dhcp4 = {

     

       42
       42
       +
                 enable = true;

     

       43
       43
       +
                 settings = {

     

       44
       44
       +
                   valid-lifetime = 3600;

     

       45
       45
       +
                   renew-timer = 900;

     

       46
       46
       +
                   rebind-timer = 1800;

     

       44
       47
        
       

     

       45
       45
       -
                     lease-database = {

     

       46
       46
       -
                       type = "memfile";

     

       47
       47
       -
                       persist = true;

     

       48
       48
       -
                       name = "/var/lib/kea/dhcp4.leases";

     

       49
       49
       -
                     };

     

       48
       48
       +
                   lease-database = {

     

       49
       49
       +
                     type = "memfile";

     

       50
       50
       +
                     persist = true;

     

       51
       51
       +
                     name = "/var/lib/kea/dhcp4.leases";

     

       52
       52
       +
                   };

     

       50
       53
        
       

     

       51
       51
       -
                     control-socket = {

     

       52
       52
       -
                       socket-type = "unix";

     

       53
       53
       -
                       socket-name = "/run/kea/dhcp4.sock";

     

       54
       54
       -
                     };

     

       54
       54
       +
                   control-socket = {

     

       55
       55
       +
                     socket-type = "unix";

     

       56
       56
       +
                     socket-name = "/run/kea/dhcp4.sock";

     

       57
       57
       +
                   };

     

       58
       58
       +
       

     

       59
       59
       +
                   interfaces-config = {

     

       60
       60
       +
                     dhcp-socket-type = "raw";

     

       61
       61
       +
                     interfaces = [

     

       62
       62
       +
                       "eth1"

     

       63
       63
       +
                     ];

     

       64
       64
       +
                   };

     

       55
       65
        
       

     

       56
       56
       -
                     interfaces-config = {

     

       57
       57
       -
                       dhcp-socket-type = "raw";

     

       58
       58
       -
                       interfaces = [

     

       59
       59
       -
                         "eth1"

     

       66
       66
       +
                   subnet4 = [

     

       67
       67
       +
                     {

     

       68
       68
       +
                       id = 1;

     

       69
       69
       +
                       subnet = "10.0.0.0/29";

     

       70
       70
       +
                       pools = [

     

       71
       71
       +
                         {

     

       72
       72
       +
                           pool = "10.0.0.3 - 10.0.0.3";

     

       73
       73
       +
                         }

     

       60
       74
        
                       ];

     

       61
       61
       -
                     };

     

       75
       75
       +
                     }

     

       76
       76
       +
                   ];

     

       77
       77
       +
       

     

       78
       78
       +
                   # Enable communication between dhcp4 and a local dhcp-ddns

     

       79
       79
       +
                   # instance.

     

       80
       80
       +
                   # https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp4-srv.html#ddns-for-dhcpv4

     

       81
       81
       +
                   dhcp-ddns = {

     

       82
       82
       +
                     enable-updates = true;

     

       83
       83
       +
                   };

     

       84
       84
       +
       

     

       85
       85
       +
                   ddns-send-updates = true;

     

       86
       86
       +
                   ddns-qualifying-suffix = "lan.nixos.test.";

     

       87
       87
       +
                 };

     

       88
       88
       +
               };

     

       62
       89
        
       

     

       63
       63
       -
                     subnet4 = [

     

       90
       90
       +
               services.kea.dhcp-ddns = {

     

       91
       91
       +
                 enable = true;

     

       92
       92
       +
                 settings = {

     

       93
       93
       +
                   forward-ddns = {

     

       94
       94
       +
                     # Configure updates of a forward zone named `lan.nixos.test`

     

       95
       95
       +
                     # hosted at the nameserver at 10.0.0.2

     

       96
       96
       +
                     # https://kea.readthedocs.io/en/kea-2.2.0/arm/ddns.html#adding-forward-dns-servers

     

       97
       97
       +
                     ddns-domains = [

     

       64
       98
        
                       {

     

       65
       65
       -
                         id = 1;

     

       66
       66
       -
                         subnet = "10.0.0.0/29";

     

       67
       67
       -
                         pools = [

     

       99
       99
       +
                         name = "lan.nixos.test.";

     

       100
       100
       +
                         # Use a TSIG key in production!

     

       101
       101
       +
                         key-name = "";

     

       102
       102
       +
                         dns-servers = [

     

       68
       103
        
                           {

     

       69
       69
       -
                             pool = "10.0.0.3 - 10.0.0.3";

     

       104
       104
       +
                             ip-address = "10.0.0.2";

     

       105
       105
       +
                             port = 53;

     

       70
       106
        
                           }

     

       71
       107
        
                         ];

     

       72
       108
        
                       }

     

       73
       109
        
                     ];

     

       74
       74
       -
       

     

       75
       75
       -
                     # Enable communication between dhcp4 and a local dhcp-ddns

     

       76
       76
       -
                     # instance.

     

       77
       77
       -
                     # https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp4-srv.html#ddns-for-dhcpv4

     

       78
       78
       -
                     dhcp-ddns = {

     

       79
       79
       -
                       enable-updates = true;

     

       80
       80
       -
                     };

     

       81
       81
       -
       

     

       82
       82
       -
                     ddns-send-updates = true;

     

       83
       83
       -
                     ddns-qualifying-suffix = "lan.nixos.test.";

     

       84
       110
        
                   };

     

       85
       111
        
                 };

     

       86
       86
       -
       

     

       87
       87
       -
                 services.kea.dhcp-ddns = {

     

       88
       88
       -
                   enable = true;

     

       89
       89
       -
                   settings = {

     

       90
       90
       -
                     forward-ddns = {

     

       91
       91
       -
                       # Configure updates of a forward zone named `lan.nixos.test`

     

       92
       92
       -
                       # hosted at the nameserver at 10.0.0.2

     

       93
       93
       -
                       # https://kea.readthedocs.io/en/kea-2.2.0/arm/ddns.html#adding-forward-dns-servers

     

       94
       94
       -
                       ddns-domains = [

     

       95
       95
       -
                         {

     

       96
       96
       -
                           name = "lan.nixos.test.";

     

       97
       97
       -
                           # Use a TSIG key in production!

     

       98
       98
       -
                           key-name = "";

     

       99
       99
       -
                           dns-servers = [

     

       100
       100
       -
                             {

     

       101
       101
       -
                               ip-address = "10.0.0.2";

     

       102
       102
       -
                               port = 53;

     

       103
       103
       -
                             }

     

       104
       104
       -
                           ];

     

       105
       105
       -
                         }

     

       106
       106
       -
                       ];

     

       107
       107
       -
                     };

     

       108
       108
       -
                   };

     

       109
       109
       -
                 };

     

       112
       112
       +
               };

     

       110
       113
        
       

     

       111
       111
       -
                 services.kea.ctrl-agent = {

     

       112
       112
       -
                   enable = true;

     

       113
       113
       -
                   settings = {

     

       114
       114
       -
                     http-host = "127.0.0.1";

     

       115
       115
       -
                     http-port = 8000;

     

       116
       116
       -
                     control-sockets.dhcp4 = {

     

       117
       117
       -
                       socket-type = "unix";

     

       118
       118
       -
                       socket-name = "/run/kea/dhcp4.sock";

     

       119
       119
       -
                     };

     

       114
       114
       +
               services.kea.ctrl-agent = {

     

       115
       115
       +
                 enable = true;

     

       116
       116
       +
                 settings = {

     

       117
       117
       +
                   http-host = "127.0.0.1";

     

       118
       118
       +
                   http-port = 8000;

     

       119
       119
       +
                   control-sockets.dhcp4 = {

     

       120
       120
       +
                     socket-type = "unix";

     

       121
       121
       +
                     socket-name = "/run/kea/dhcp4.sock";

     

       120
       122
        
                   };

     

       121
       123
        
                 };

     

       124
       124
       +
               };

     

       122
       125
        
       

     

       123
       123
       -
                 services.prometheus.exporters.kea = {

     

       124
       124
       -
                   enable = true;

     

       125
       125
       -
                   controlSocketPaths = [

     

       126
       126
       -
                     "http://127.0.0.1:8000"

     

       127
       127
       -
                   ];

     

       128
       128
       -
                 };

     

       126
       126
       +
               services.prometheus.exporters.kea = {

     

       127
       127
       +
                 enable = true;

     

       128
       128
       +
                 controlSocketPaths = [

     

       129
       129
       +
                   "http://127.0.0.1:8000"

     

       130
       130
       +
                 ];

     

       129
       131
        
               };

     

       132
       132
       +
             };

     

       130
       133
        
       

     

       131
       131
       -
             nameserver =

     

       132
       132
       -
               { config, pkgs, ... }:

     

       133
       133
       -
               {

     

       134
       134
       -
                 virtualisation.vlans = [ 1 ];

     

       134
       134
       +
           nameserver =

     

       135
       135
       +
             { config, pkgs, ... }:

     

       136
       136
       +
             {

     

       137
       137
       +
               virtualisation.vlans = [ 1 ];

     

       135
       138
        
       

     

       136
       136
       -
                 networking = {

     

       137
       137
       -
                   useDHCP = false;

     

       138
       138
       -
                   firewall.allowedUDPPorts = [ 53 ];

     

       139
       139
       -
                 };

     

       139
       139
       +
               networking = {

     

       140
       140
       +
                 useDHCP = false;

     

       141
       141
       +
                 firewall.allowedUDPPorts = [ 53 ];

     

       142
       142
       +
               };

     

       140
       143
        
       

     

       141
       141
       -
                 systemd.network = {

     

       142
       142
       -
                   enable = true;

     

       143
       143
       -
                   networks = {

     

       144
       144
       -
                     "01-eth1" = {

     

       145
       145
       -
                       name = "eth1";

     

       146
       146
       -
                       networkConfig = {

     

       147
       147
       -
                         Address = "10.0.0.2/29";

     

       148
       148
       -
                       };

     

       144
       144
       +
               systemd.network = {

     

       145
       145
       +
                 enable = true;

     

       146
       146
       +
                 networks = {

     

       147
       147
       +
                   "01-eth1" = {

     

       148
       148
       +
                     name = "eth1";

     

       149
       149
       +
                     networkConfig = {

     

       150
       150
       +
                       Address = "10.0.0.2/29";

     

       149
       151
        
                     };

     

       150
       152
        
                   };

     

       151
       153
        
                 };

     

       154
       154
       +
               };

     

       152
       155
        
       

     

       153
       153
       -
                 services.resolved.enable = false;

     

       156
       156
       +
               services.resolved.enable = false;

     

       154
       157
        
       

     

       155
       155
       -
                 # Set up an authoritative nameserver, serving the `lan.nixos.test`

     

       156
       156
       -
                 # zone and configure an ACL that allows dynamic updates from

     

       157
       157
       -
                 # the router's ip address.

     

       158
       158
       -
                 # This ACL is likely insufficient for production usage. Please

     

       159
       159
       -
                 # use TSIG keys.

     

       160
       160
       -
                 services.knot =

     

       161
       161
       -
                   let

     

       162
       162
       -
                     zone = pkgs.writeTextDir "lan.nixos.test.zone" ''

     

       163
       163
       -
                       @ SOA ns.nixos.test nox.nixos.test 0 86400 7200 3600000 172800

     

       164
       164
       -
                       @ NS nameserver

     

       165
       165
       -
                       nameserver A 10.0.0.3

     

       166
       166
       -
                       router A 10.0.0.1

     

       167
       167
       -
                     '';

     

       168
       168
       -
                     zonesDir = pkgs.buildEnv {

     

       169
       169
       -
                       name = "knot-zones";

     

       170
       170
       -
                       paths = [ zone ];

     

       171
       171
       -
                     };

     

       172
       172
       -
                   in

     

       173
       173
       -
                   {

     

       174
       174
       -
                     enable = true;

     

       175
       175
       -
                     extraArgs = [

     

       176
       176
       -
                       "-v"

     

       158
       158
       +
               # Set up an authoritative nameserver, serving the `lan.nixos.test`

     

       159
       159
       +
               # zone and configure an ACL that allows dynamic updates from

     

       160
       160
       +
               # the router's ip address.

     

       161
       161
       +
               # This ACL is likely insufficient for production usage. Please

     

       162
       162
       +
               # use TSIG keys.

     

       163
       163
       +
               services.knot =

     

       164
       164
       +
                 let

     

       165
       165
       +
                   zone = pkgs.writeTextDir "lan.nixos.test.zone" ''

     

       166
       166
       +
                     @ SOA ns.nixos.test nox.nixos.test 0 86400 7200 3600000 172800

     

       167
       167
       +
                     @ NS nameserver

     

       168
       168
       +
                     nameserver A 10.0.0.3

     

       169
       169
       +
                     router A 10.0.0.1

     

       170
       170
       +
                   '';

     

       171
       171
       +
                   zonesDir = pkgs.buildEnv {

     

       172
       172
       +
                     name = "knot-zones";

     

       173
       173
       +
                     paths = [ zone ];

     

       174
       174
       +
                   };

     

       175
       175
       +
                 in

     

       176
       176
       +
                 {

     

       177
       177
       +
                   enable = true;

     

       178
       178
       +
                   extraArgs = [

     

       179
       179
       +
                     "-v"

     

       180
       180
       +
                   ];

     

       181
       181
       +
                   settings = {

     

       182
       182
       +
                     server.listen = [

     

       183
       183
       +
                       "0.0.0.0@53"

     

       177
       184
        
                     ];

     

       178
       178
       -
                     settings = {

     

       179
       179
       -
                       server.listen = [

     

       180
       180
       -
                         "0.0.0.0@53"

     

       181
       181
       -
                       ];

     

       182
       185
        
       

     

       183
       183
       -
                       log.syslog.any = "info";

     

       186
       186
       +
                     log.syslog.any = "info";

     

       184
       187
        
       

     

       185
       185
       -
                       acl.dhcp_ddns = {

     

       186
       186
       -
                         address = "10.0.0.1";

     

       187
       187
       -
                         action = "update";

     

       188
       188
       -
                       };

     

       188
       188
       +
                     acl.dhcp_ddns = {

     

       189
       189
       +
                       address = "10.0.0.1";

     

       190
       190
       +
                       action = "update";

     

       191
       191
       +
                     };

     

       189
       192
        
       

     

       190
       190
       -
                       template.default = {

     

       191
       191
       -
                         storage = zonesDir;

     

       192
       192
       -
                         zonefile-sync = "-1";

     

       193
       193
       -
                         zonefile-load = "difference-no-serial";

     

       194
       194
       -
                         journal-content = "all";

     

       195
       195
       -
                       };

     

       193
       193
       +
                     template.default = {

     

       194
       194
       +
                       storage = zonesDir;

     

       195
       195
       +
                       zonefile-sync = "-1";

     

       196
       196
       +
                       zonefile-load = "difference-no-serial";

     

       197
       197
       +
                       journal-content = "all";

     

       198
       198
       +
                     };

     

       196
       199
        
       

     

       197
       197
       -
                       zone."lan.nixos.test" = {

     

       198
       198
       -
                         file = "lan.nixos.test.zone";

     

       199
       199
       -
                         acl = [

     

       200
       200
       -
                           "dhcp_ddns"

     

       201
       201
       -
                         ];

     

       202
       202
       -
                       };

     

       200
       200
       +
                     zone."lan.nixos.test" = {

     

       201
       201
       +
                       file = "lan.nixos.test.zone";

     

       202
       202
       +
                       acl = [

     

       203
       203
       +
                         "dhcp_ddns"

     

       204
       204
       +
                       ];

     

       203
       205
        
                     };

     

       204
       206
        
                   };

     

       207
       207
       +
                 };

     

       205
       208
        
       

     

       206
       206
       -
               };

     

       209
       209
       +
             };

     

       207
       210
        
       

     

       208
       208
       -
             client =

     

       209
       209
       -
               { config, pkgs, ... }:

     

       210
       210
       -
               {

     

       211
       211
       -
                 virtualisation.vlans = [ 1 ];

     

       212
       212
       -
                 systemd.services.systemd-networkd.environment.SYSTEMD_LOG_LEVEL = "debug";

     

       213
       213
       -
                 networking = {

     

       214
       214
       -
                   useNetworkd = true;

     

       215
       215
       -
                   useDHCP = false;

     

       216
       216
       -
                   firewall.enable = false;

     

       217
       217
       -
                   interfaces.eth1.useDHCP = true;

     

       218
       218
       -
                 };

     

       211
       211
       +
           client =

     

       212
       212
       +
             { config, pkgs, ... }:

     

       213
       213
       +
             {

     

       214
       214
       +
               virtualisation.vlans = [ 1 ];

     

       215
       215
       +
               systemd.services.systemd-networkd.environment.SYSTEMD_LOG_LEVEL = "debug";

     

       216
       216
       +
               networking = {

     

       217
       217
       +
                 useNetworkd = true;

     

       218
       218
       +
                 useDHCP = false;

     

       219
       219
       +
                 firewall.enable = false;

     

       220
       220
       +
                 interfaces.eth1.useDHCP = true;

     

       219
       221
        
               };

     

       220
       220
       -
           };

     

       221
       221
       -
           testScript =

     

       222
       222
       -
             { ... }:

     

       223
       223
       -
             ''

     

       224
       224
       -
               start_all()

     

       225
       225
       -
               router.wait_for_unit("kea-dhcp4-server.service")

     

       226
       226
       -
               client.systemctl("start systemd-networkd-wait-online.service")

     

       227
       227
       -
               client.wait_for_unit("systemd-networkd-wait-online.service")

     

       228
       228
       -
               client.wait_until_succeeds("ping -c 5 10.0.0.1")

     

       229
       229
       -
               router.wait_until_succeeds("ping -c 5 10.0.0.3")

     

       230
       230
       -
               nameserver.wait_until_succeeds("kdig +short client.lan.nixos.test @10.0.0.2 | grep -q 10.0.0.3")

     

       231
       231
       -
               router.log(router.execute("curl 127.0.0.1:9547")[1])

     

       232
       232
       -
               router.succeed("curl --no-buffer 127.0.0.1:9547 | grep -qE '^kea_dhcp4_addresses_assigned_total.*1.0$'")

     

       233
       233
       -
             '';

     

       234
       234
       -
         }

     

       235
       235
       -
       )

     

       222
       222
       +
             };

     

       223
       223
       +
         };

     

       224
       224
       +
         testScript =

     

       225
       225
       +
           { ... }:

     

       226
       226
       +
           ''

     

       227
       227
       +
             start_all()

     

       228
       228
       +
             router.wait_for_unit("kea-dhcp4-server.service")

     

       229
       229
       +
             client.systemctl("start systemd-networkd-wait-online.service")

     

       230
       230
       +
             client.wait_for_unit("systemd-networkd-wait-online.service")

     

       231
       231
       +
             client.wait_until_succeeds("ping -c 5 10.0.0.1")

     

       232
       232
       +
             router.wait_until_succeeds("ping -c 5 10.0.0.3")

     

       233
       233
       +
             nameserver.wait_until_succeeds("kdig +short client.lan.nixos.test @10.0.0.2 | grep -q 10.0.0.3")

     

       234
       234
       +
             router.log(router.execute("curl 127.0.0.1:9547")[1])

     

       235
       235
       +
             router.succeed("curl --no-buffer 127.0.0.1:9547 | grep -qE '^kea_dhcp4_addresses_assigned_total.*1.0$'")

     

       236
       236
       +
           '';

     

       237
       237
       +
       }