commit 5c5d7300674d295f18f52e3c73a8dbfc9886c29b · pyrox.dev/nixpkgs

nixos/modules/module-list.nix

···

       1506
        
         ./virtualisation/docker.nix

     

       1507
        
         ./virtualisation/ecs-agent.nix

     

       1508
        
         ./virtualisation/hyperv-guest.nix

     

       0
        
       
     

       1509
        
         ./virtualisation/kvmgt.nix

     

       1510
        
         ./virtualisation/libvirtd.nix

     

       1511
        
         ./virtualisation/lxc.nix

···

       1506
        
         ./virtualisation/docker.nix

     

       1507
        
         ./virtualisation/ecs-agent.nix

     

       1508
        
         ./virtualisation/hyperv-guest.nix

     

       1509
       +
         ./virtualisation/incus.nix

     

       1510
        
         ./virtualisation/kvmgt.nix

     

       1511
        
         ./virtualisation/libvirtd.nix

     

       1512
        
         ./virtualisation/lxc.nix

+236

nixos/modules/virtualisation/incus.nix

···

       1
       +
       { config, lib, pkgs, ... }:

     

       2
       +
       

     

       3
       +
       let

     

       4
       +
         cfg = config.virtualisation.incus;

     

       5
       +
         preseedFormat = pkgs.formats.yaml { };

     

       6
       +
       in

     

       7
       +
       {

     

       8
       +
         meta.maintainers = [ lib.maintainers.adamcstephens ];

     

       9
       +
       

     

       10
       +
         options = {

     

       11
       +
           virtualisation.incus = {

     

       12
       +
             enable = lib.mkEnableOption (lib.mdDoc ''

     

       13
       +
               incusd, a daemon that manages containers and virtual machines.

     

       14
       +
       

     

       15
       +
               Users in the "incus-admin" group can interact with

     

       16
       +
               the daemon (e.g. to start or stop containers) using the

     

       17
       +
               {command}`incus` command line tool, among others.

     

       18
       +
             '');

     

       19
       +
       

     

       20
       +
             package = lib.mkPackageOptionMD pkgs "incus" { };

     

       21
       +
       

     

       22
       +
             lxcPackage = lib.mkPackageOptionMD pkgs "lxc" { };

     

       23
       +
       

     

       24
       +
             preseed = lib.mkOption {

     

       25
       +
               type = lib.types.nullOr (

     

       26
       +
                 lib.types.submodule { freeformType = preseedFormat.type; }

     

       27
       +
               );

     

       28
       +
       

     

       29
       +
               default = null;

     

       30
       +
       

     

       31
       +
               description = lib.mdDoc ''

     

       32
       +
                 Configuration for Incus preseed, see

     

       33
       +
                 <https://linuxcontainers.org/incus/docs/main/howto/initialize/#non-interactive-configuration>

     

       34
       +
                 for supported values.

     

       35
       +
       

     

       36
       +
                 Changes to this will be re-applied to Incus which will overwrite existing entities or create missing ones,

     

       37
       +
                 but entities will *not* be removed by preseed.

     

       38
       +
               '';

     

       39
       +
       

     

       40
       +
               example = {

     

       41
       +
                 networks = [

     

       42
       +
                   {

     

       43
       +
                     name = "incusbr0";

     

       44
       +
                     type = "bridge";

     

       45
       +
                     config = {

     

       46
       +
                       "ipv4.address" = "10.0.100.1/24";

     

       47
       +
                       "ipv4.nat" = "true";

     

       48
       +
                     };

     

       49
       +
                   }

     

       50
       +
                 ];

     

       51
       +
                 profiles = [

     

       52
       +
                   {

     

       53
       +
                     name = "default";

     

       54
       +
                     devices = {

     

       55
       +
                       eth0 = {

     

       56
       +
                         name = "eth0";

     

       57
       +
                         network = "incusbr0";

     

       58
       +
                         type = "nic";

     

       59
       +
                       };

     

       60
       +
                       root = {

     

       61
       +
                         path = "/";

     

       62
       +
                         pool = "default";

     

       63
       +
                         size = "35GiB";

     

       64
       +
                         type = "disk";

     

       65
       +
                       };

     

       66
       +
                     };

     

       67
       +
                   }

     

       68
       +
                 ];

     

       69
       +
                 storage_pools = [

     

       70
       +
                   {

     

       71
       +
                     name = "default";

     

       72
       +
                     driver = "dir";

     

       73
       +
                     config = {

     

       74
       +
                       source = "/var/lib/incus/storage-pools/default";

     

       75
       +
                     };

     

       76
       +
                   }

     

       77
       +
                 ];

     

       78
       +
               };

     

       79
       +
             };

     

       80
       +
       

     

       81
       +
             socketActivation = lib.mkEnableOption (

     

       82
       +
               lib.mdDoc ''

     

       83
       +
                 socket-activation for starting incus.service. Enabling this option

     

       84
       +
                 will stop incus.service from starting automatically on boot.

     

       85
       +
               ''

     

       86
       +
             );

     

       87
       +
       

     

       88
       +
             startTimeout = lib.mkOption {

     

       89
       +
               type = lib.types.ints.unsigned;

     

       90
       +
               default = 600;

     

       91
       +
               apply = toString;

     

       92
       +
               description = lib.mdDoc ''

     

       93
       +
                 Time to wait (in seconds) for incusd to become ready to process requests.

     

       94
       +
                 If incusd does not reply within the configured time, `incus.service` will be

     

       95
       +
                 considered failed and systemd will attempt to restart it.

     

       96
       +
               '';

     

       97
       +
             };

     

       98
       +
           };

     

       99
       +
         };

     

       100
       +
       

     

       101
       +
         config = lib.mkIf cfg.enable {

     

       102
       +
           # https://github.com/lxc/incus/blob/f145309929f849b9951658ad2ba3b8f10cbe69d1/doc/reference/server_settings.md

     

       103
       +
           boot.kernel.sysctl = {

     

       104
       +
             "fs.aio-max-nr" = lib.mkDefault 524288;

     

       105
       +
             "fs.inotify.max_queued_events" = lib.mkDefault 1048576;

     

       106
       +
             "fs.inotify.max_user_instances" = lib.mkOverride 1050 1048576; # override in case conflict nixos/modules/services/x11/xserver.nix

     

       107
       +
             "fs.inotify.max_user_watches" = lib.mkOverride 1050 1048576; # override in case conflict nixos/modules/services/x11/xserver.nix

     

       108
       +
             "kernel.dmesg_restrict" = lib.mkDefault 1;

     

       109
       +
             "kernel.keys.maxbytes" = lib.mkDefault 2000000;

     

       110
       +
             "kernel.keys.maxkeys" = lib.mkDefault 2000;

     

       111
       +
             "net.core.bpf_jit_limit" = lib.mkDefault 1000000000;

     

       112
       +
             "net.ipv4.neigh.default.gc_thresh3" = lib.mkDefault 8192;

     

       113
       +
             "net.ipv6.neigh.default.gc_thresh3" = lib.mkDefault 8192;

     

       114
       +
             # vm.max_map_count is set higher in nixos/modules/config/sysctl.nix

     

       115
       +
           };

     

       116
       +
       

     

       117
       +
           boot.kernelModules = [

     

       118
       +
             "veth"

     

       119
       +
             "xt_comment"

     

       120
       +
             "xt_CHECKSUM"

     

       121
       +
             "xt_MASQUERADE"

     

       122
       +
             "vhost_vsock"

     

       123
       +
           ] ++ lib.optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];

     

       124
       +
       

     

       125
       +
           environment.systemPackages = [ cfg.package ];

     

       126
       +
       

     

       127
       +
           # Note: the following options are also declared in virtualisation.lxc, but

     

       128
       +
           # the latter can't be simply enabled to reuse the formers, because it

     

       129
       +
           # does a bunch of unrelated things.

     

       130
       +
           systemd.tmpfiles.rules = [ "d /var/lib/lxc/rootfs 0755 root root -" ];

     

       131
       +
       

     

       132
       +
           security.apparmor = {

     

       133
       +
             packages = [ cfg.lxcPackage ];

     

       134
       +
             policies = {

     

       135
       +
               "bin.lxc-start".profile = ''

     

       136
       +
                 include ${cfg.lxcPackage}/etc/apparmor.d/usr.bin.lxc-start

     

       137
       +
               '';

     

       138
       +
               "lxc-containers".profile = ''

     

       139
       +
                 include ${cfg.lxcPackage}/etc/apparmor.d/lxc-containers

     

       140
       +
               '';

     

       141
       +
             };

     

       142
       +
           };

     

       143
       +
       

     

       144
       +
           systemd.services.incus = {

     

       145
       +
             description = "Incus Container and Virtual Machine Management Daemon";

     

       146
       +
       

     

       147
       +
             wantedBy = lib.mkIf (!cfg.socketActivation) [ "multi-user.target" ];

     

       148
       +
             after = [

     

       149
       +
               "network-online.target"

     

       150
       +
               "lxcfs.service"

     

       151
       +
             ] ++ (lib.optional cfg.socketActivation "incus.socket");

     

       152
       +
             requires = [

     

       153
       +
               "lxcfs.service"

     

       154
       +
             ] ++ (lib.optional cfg.socketActivation "incus.socket");

     

       155
       +
             wants = [

     

       156
       +
               "network-online.target"

     

       157
       +
             ];

     

       158
       +
       

     

       159
       +
             path = lib.mkIf config.boot.zfs.enabled [ config.boot.zfs.package ];

     

       160
       +
       

     

       161
       +
             environment = {

     

       162
       +
               # Override Path to the LXC template configuration directory

     

       163
       +
               INCUS_LXC_TEMPLATE_CONFIG = "${pkgs.lxcfs}/share/lxc/config";

     

       164
       +
             };

     

       165
       +
       

     

       166
       +
             serviceConfig = {

     

       167
       +
               ExecStart = "${cfg.package}/bin/incusd --group incus-admin";

     

       168
       +
               ExecStartPost = "${cfg.package}/bin/incusd waitready --timeout=${cfg.startTimeout}";

     

       169
       +
               ExecStop = "${cfg.package}/bin/incus admin shutdown";

     

       170
       +
       

     

       171
       +
               KillMode = "process"; # when stopping, leave the containers alone

     

       172
       +
               Delegate = "yes";

     

       173
       +
               LimitMEMLOCK = "infinity";

     

       174
       +
               LimitNOFILE = "1048576";

     

       175
       +
               LimitNPROC = "infinity";

     

       176
       +
               TasksMax = "infinity";

     

       177
       +
       

     

       178
       +
               Restart = "on-failure";

     

       179
       +
               TimeoutStartSec = "${cfg.startTimeout}s";

     

       180
       +
               TimeoutStopSec = "30s";

     

       181
       +
             };

     

       182
       +
           };

     

       183
       +
       

     

       184
       +
           systemd.sockets.incus = lib.mkIf cfg.socketActivation {

     

       185
       +
             description = "Incus UNIX socket";

     

       186
       +
             wantedBy = [ "sockets.target" ];

     

       187
       +
       

     

       188
       +
             socketConfig = {

     

       189
       +
               ListenStream = "/var/lib/incus/unix.socket";

     

       190
       +
               SocketMode = "0660";

     

       191
       +
               SocketGroup = "incus-admin";

     

       192
       +
               Service = "incus.service";

     

       193
       +
             };

     

       194
       +
           };

     

       195
       +
       

     

       196
       +
           systemd.services.incus-preseed = lib.mkIf (cfg.preseed != null) {

     

       197
       +
             description = "Incus initialization with preseed file";

     

       198
       +
       

     

       199
       +
             wantedBy = ["incus.service"];

     

       200
       +
             after = ["incus.service"];

     

       201
       +
             bindsTo = ["incus.service"];

     

       202
       +
             partOf = ["incus.service"];

     

       203
       +
       

     

       204
       +
             script = ''

     

       205
       +
               ${cfg.package}/bin/incus admin init --preseed <${

     

       206
       +
                 preseedFormat.generate "incus-preseed.yaml" cfg.preseed

     

       207
       +
               }

     

       208
       +
             '';

     

       209
       +
       

     

       210
       +
             serviceConfig = {

     

       211
       +
               Type = "oneshot";

     

       212
       +
               RemainAfterExit = true;

     

       213
       +
             };

     

       214
       +
           };

     

       215
       +
       

     

       216
       +
           users.groups.incus-admin = { };

     

       217
       +
       

     

       218
       +
           users.users.root = {

     

       219
       +
             # match documented default ranges https://linuxcontainers.org/incus/docs/main/userns-idmap/#allowed-ranges

     

       220
       +
             subUidRanges = [

     

       221
       +
               {

     

       222
       +
                 startUid = 1000000;

     

       223
       +
                 count = 1000000000;

     

       224
       +
               }

     

       225
       +
             ];

     

       226
       +
             subGidRanges = [

     

       227
       +
               {

     

       228
       +
                 startGid = 1000000;

     

       229
       +
                 count = 1000000000;

     

       230
       +
               }

     

       231
       +
             ];

     

       232
       +
           };

     

       233
       +
       

     

       234
       +
           virtualisation.lxc.lxcfs.enable = true;

     

       235
       +
         };

     

       236
       +
       }

nixos/tests/all-tests.nix

···

       394
        
         icingaweb2 = handleTest ./icingaweb2.nix {};

     

       395
        
         iftop = handleTest ./iftop.nix {};

     

       396
        
         incron = handleTest ./incron.nix {};

     

       0
        
       
     

       397
        
         influxdb = handleTest ./influxdb.nix {};

     

       398
        
         influxdb2 = handleTest ./influxdb2.nix {};

     

       399
        
         initrd-network-openvpn = handleTest ./initrd-network-openvpn {};

···

       394
        
         icingaweb2 = handleTest ./icingaweb2.nix {};

     

       395
        
         iftop = handleTest ./iftop.nix {};

     

       396
        
         incron = handleTest ./incron.nix {};

     

       397
       +
         incus = pkgs.recurseIntoAttrs (handleTest ./incus { inherit handleTestOn; });

     

       398
        
         influxdb = handleTest ./influxdb.nix {};

     

       399
        
         influxdb2 = handleTest ./influxdb2.nix {};

     

       400
        
         initrd-network-openvpn = handleTest ./initrd-network-openvpn {};

+77

nixos/tests/incus/container.nix

···

       1
       +
       import ../make-test-python.nix ({ pkgs, lib, ... } :

     

       2
       +
       

     

       3
       +
       let

     

       4
       +
         releases = import ../../release.nix {

     

       5
       +
           configuration = {

     

       6
       +
             # Building documentation makes the test unnecessarily take a longer time:

     

       7
       +
             documentation.enable = lib.mkForce false;

     

       8
       +
           };

     

       9
       +
         };

     

       10
       +
       

     

       11
       +
         container-image-metadata = releases.lxdContainerMeta.${pkgs.stdenv.hostPlatform.system};

     

       12
       +
         container-image-rootfs = releases.lxdContainerImage.${pkgs.stdenv.hostPlatform.system};

     

       13
       +
       in

     

       14
       +
       {

     

       15
       +
         name = "incus-container";

     

       16
       +
       

     

       17
       +
         meta.maintainers = with lib.maintainers; [ adamcstephens ];

     

       18
       +
       

     

       19
       +
         nodes.machine = { ... }: {

     

       20
       +
           virtualisation = {

     

       21
       +
             # Ensure test VM has enough resources for creating and managing guests

     

       22
       +
             cores = 2;

     

       23
       +
             memorySize = 1024;

     

       24
       +
             diskSize = 4096;

     

       25
       +
       

     

       26
       +
             incus.enable = true;

     

       27
       +
           };

     

       28
       +
         };

     

       29
       +
       

     

       30
       +
         testScript = ''

     

       31
       +
           def instance_is_up(_) -> bool:

     

       32
       +
               status, _ = machine.execute("incus exec container --disable-stdin --force-interactive /run/current-system/sw/bin/true")

     

       33
       +
               return status == 0

     

       34
       +
       

     

       35
       +
           def set_container(config):

     

       36
       +
               machine.succeed(f"incus config set container {config}")

     

       37
       +
               machine.succeed("incus restart container")

     

       38
       +
               with machine.nested("Waiting for instance to start and be usable"):

     

       39
       +
                 retry(instance_is_up)

     

       40
       +
       

     

       41
       +
           machine.wait_for_unit("incus.service")

     

       42
       +
       

     

       43
       +
           # no preseed should mean no service

     

       44
       +
           machine.fail("systemctl status incus-preseed.service")

     

       45
       +
       

     

       46
       +
           machine.succeed("incus admin init --minimal")

     

       47
       +
       

     

       48
       +
           with subtest("Container image can be imported"):

     

       49
       +
               machine.succeed("incus image import ${container-image-metadata}/*/*.tar.xz ${container-image-rootfs}/*/*.tar.xz --alias nixos")

     

       50
       +
       

     

       51
       +
           with subtest("Container can be launched and managed"):

     

       52
       +
               machine.succeed("incus launch nixos container")

     

       53
       +
               with machine.nested("Waiting for instance to start and be usable"):

     

       54
       +
                 retry(instance_is_up)

     

       55
       +
               machine.succeed("echo true | incus exec container /run/current-system/sw/bin/bash -")

     

       56
       +
       

     

       57
       +
           with subtest("Container CPU limits can be managed"):

     

       58
       +
               set_container("limits.cpu 1")

     

       59
       +
               cpuinfo = machine.succeed("incus exec container grep -- -c ^processor /proc/cpuinfo").strip()

     

       60
       +
               assert cpuinfo == "1", f"Wrong number of CPUs reported from /proc/cpuinfo, want: 1, got: {cpuinfo}"

     

       61
       +
       

     

       62
       +
               set_container("limits.cpu 2")

     

       63
       +
               cpuinfo = machine.succeed("incus exec container grep -- -c ^processor /proc/cpuinfo").strip()

     

       64
       +
               assert cpuinfo == "2", f"Wrong number of CPUs reported from /proc/cpuinfo, want: 2, got: {cpuinfo}"

     

       65
       +
       

     

       66
       +
           with subtest("Container memory limits can be managed"):

     

       67
       +
               set_container("limits.memory 64MB")

     

       68
       +
               meminfo = machine.succeed("incus exec container grep -- MemTotal /proc/meminfo").strip()

     

       69
       +
               meminfo_bytes = " ".join(meminfo.split(' ')[-2:])

     

       70
       +
               assert meminfo_bytes == "62500 kB", f"Wrong amount of memory reported from /proc/meminfo, want: '62500 kB', got: '{meminfo_bytes}'"

     

       71
       +
       

     

       72
       +
               set_container("limits.memory 128MB")

     

       73
       +
               meminfo = machine.succeed("incus exec container grep -- MemTotal /proc/meminfo").strip()

     

       74
       +
               meminfo_bytes = " ".join(meminfo.split(' ')[-2:])

     

       75
       +
               assert meminfo_bytes == "125000 kB", f"Wrong amount of memory reported from /proc/meminfo, want: '125000 kB', got: '{meminfo_bytes}'"

     

       76
       +
         '';

     

       77
       +
       })

+14

nixos/tests/incus/default.nix

···

       1
       +
       {

     

       2
       +
         system ? builtins.currentSystem,

     

       3
       +
         config ? { },

     

       4
       +
         pkgs ? import ../../.. { inherit system config; },

     

       5
       +
         handleTestOn,

     

       6
       +
       }:

     

       7
       +
       {

     

       8
       +
         container = import ./container.nix { inherit system pkgs; };

     

       9
       +
         preseed = import ./preseed.nix { inherit system pkgs; };

     

       10
       +
         socket-activated = import ./socket-activated.nix { inherit system pkgs; };

     

       11
       +
         virtual-machine = handleTestOn [ "x86_64-linux" ] ./virtual-machine.nix {

     

       12
       +
           inherit system pkgs;

     

       13
       +
         };

     

       14
       +
       }

+60

nixos/tests/incus/preseed.nix

···

       1
       +
       import ../make-test-python.nix ({ pkgs, lib, ... } :

     

       2
       +
       

     

       3
       +
       {

     

       4
       +
         name = "incus-preseed";

     

       5
       +
       

     

       6
       +
         meta.maintainers = with lib.maintainers; [ adamcstephens ];

     

       7
       +
       

     

       8
       +
         nodes.machine = { lib, ... }: {

     

       9
       +
           virtualisation = {

     

       10
       +
             incus.enable = true;

     

       11
       +
       

     

       12
       +
             incus.preseed = {

     

       13
       +
               networks = [

     

       14
       +
                 {

     

       15
       +
                   name = "nixostestbr0";

     

       16
       +
                   type = "bridge";

     

       17
       +
                   config = {

     

       18
       +
                     "ipv4.address" = "10.0.100.1/24";

     

       19
       +
                     "ipv4.nat" = "true";

     

       20
       +
                   };

     

       21
       +
                 }

     

       22
       +
               ];

     

       23
       +
               profiles = [

     

       24
       +
                 {

     

       25
       +
                   name = "nixostest_default";

     

       26
       +
                   devices = {

     

       27
       +
                     eth0 = {

     

       28
       +
                       name = "eth0";

     

       29
       +
                       network = "nixostestbr0";

     

       30
       +
                       type = "nic";

     

       31
       +
                     };

     

       32
       +
                     root = {

     

       33
       +
                       path = "/";

     

       34
       +
                       pool = "default";

     

       35
       +
                       size = "35GiB";

     

       36
       +
                       type = "disk";

     

       37
       +
                     };

     

       38
       +
                   };

     

       39
       +
                 }

     

       40
       +
               ];

     

       41
       +
               storage_pools = [

     

       42
       +
                 {

     

       43
       +
                   name = "nixostest_pool";

     

       44
       +
                   driver = "dir";

     

       45
       +
                 }

     

       46
       +
               ];

     

       47
       +
             };

     

       48
       +
           };

     

       49
       +
         };

     

       50
       +
       

     

       51
       +
         testScript = ''

     

       52
       +
           machine.wait_for_unit("incus.service")

     

       53
       +
           machine.wait_for_unit("incus-preseed.service")

     

       54
       +
       

     

       55
       +
           with subtest("Verify preseed resources created"):

     

       56
       +
             machine.succeed("incus profile show nixostest_default")

     

       57
       +
             machine.succeed("incus network info nixostestbr0")

     

       58
       +
             machine.succeed("incus storage show nixostest_pool")

     

       59
       +
         '';

     

       60
       +
       })

+26

nixos/tests/incus/socket-activated.nix

···

       1
       +
       import ../make-test-python.nix ({ pkgs, lib, ... } :

     

       2
       +
       

     

       3
       +
       {

     

       4
       +
         name = "incus-socket-activated";

     

       5
       +
       

     

       6
       +
         meta.maintainers = with lib.maintainers; [ adamcstephens ];

     

       7
       +
       

     

       8
       +
         nodes.machine = { lib, ... }: {

     

       9
       +
           virtualisation = {

     

       10
       +
             incus.enable = true;

     

       11
       +
             incus.socketActivation = true;

     

       12
       +
           };

     

       13
       +
         };

     

       14
       +
       

     

       15
       +
         testScript = ''

     

       16
       +
           machine.wait_for_unit("incus.socket")

     

       17
       +
       

     

       18
       +
           # ensure service is not running by default

     

       19
       +
           machine.fail("systemctl is-active incus.service")

     

       20
       +
           machine.fail("systemctl is-active incus-preseed.service")

     

       21
       +
       

     

       22
       +
           # access the socket and ensure the service starts

     

       23
       +
           machine.succeed("incus list")

     

       24
       +
           machine.wait_for_unit("incus.service")

     

       25
       +
         '';

     

       26
       +
       })

+55

nixos/tests/incus/virtual-machine.nix

···

       1
       +
       import ../make-test-python.nix ({ pkgs, lib, ... }:

     

       2
       +
       

     

       3
       +
       let

     

       4
       +
         releases = import ../../release.nix {

     

       5
       +
           configuration = {

     

       6
       +
             # Building documentation makes the test unnecessarily take a longer time:

     

       7
       +
             documentation.enable = lib.mkForce false;

     

       8
       +
       

     

       9
       +
             # Our tests require `grep` & friends:

     

       10
       +
             environment.systemPackages = with pkgs; [busybox];

     

       11
       +
           };

     

       12
       +
         };

     

       13
       +
       

     

       14
       +
         vm-image-metadata = releases.lxdVirtualMachineImageMeta.${pkgs.stdenv.hostPlatform.system};

     

       15
       +
         vm-image-disk = releases.lxdVirtualMachineImage.${pkgs.stdenv.hostPlatform.system};

     

       16
       +
       

     

       17
       +
         instance-name = "instance1";

     

       18
       +
       in

     

       19
       +
       {

     

       20
       +
         name = "incus-virtual-machine";

     

       21
       +
       

     

       22
       +
         meta.maintainers = with lib.maintainers; [ adamcstephens ];

     

       23
       +
       

     

       24
       +
         nodes.machine = {...}: {

     

       25
       +
           virtualisation = {

     

       26
       +
             # Ensure test VM has enough resources for creating and managing guests

     

       27
       +
             cores = 2;

     

       28
       +
             memorySize = 1024;

     

       29
       +
             diskSize = 4096;

     

       30
       +
       

     

       31
       +
             incus.enable = true;

     

       32
       +
           };

     

       33
       +
         };

     

       34
       +
       

     

       35
       +
         testScript = ''

     

       36
       +
           def instance_is_up(_) -> bool:

     

       37
       +
             status, _ = machine.execute("incus exec ${instance-name} --disable-stdin --force-interactive /run/current-system/sw/bin/true")

     

       38
       +
             return status == 0

     

       39
       +
       

     

       40
       +
           machine.wait_for_unit("incus.service")

     

       41
       +
       

     

       42
       +
           machine.succeed("incus admin init --minimal")

     

       43
       +
       

     

       44
       +
           with subtest("virtual-machine image can be imported"):

     

       45
       +
               machine.succeed("incus image import ${vm-image-metadata}/*/*.tar.xz ${vm-image-disk}/nixos.qcow2 --alias nixos")

     

       46
       +
       

     

       47
       +
           with subtest("virtual-machine can be launched and become available"):

     

       48
       +
               machine.succeed("incus launch nixos ${instance-name} --vm --config limits.memory=512MB --config security.secureboot=false")

     

       49
       +
               with machine.nested("Waiting for instance to start and be usable"):

     

       50
       +
                 retry(instance_is_up)

     

       51
       +
       

     

       52
       +
           with subtest("lxd-agent is started"):

     

       53
       +
               machine.succeed("incus exec ${instance-name} systemctl is-active lxd-agent")

     

       54
       +
         '';

     

       55
       +
       })

+1 -3

pkgs/by-name/co/cowsql/package.nix

···

       39
        
         outputs = [ "dev" "out" ];

     

       40
        
       

     

       41
        
         passthru = {

     

       42
       -
           tests = {

     

       43
       -
             inherit incus;

     

       44
       -
           };

     

       45
        
       

     

       46
        
           updateScript = gitUpdater {

     

       47
        
             rev-prefix = "v";

···

       39
        
         outputs = [ "dev" "out" ];

     

       40
        
       

     

       41
        
         passthru = {

     

       42
       +
           inherit (incus) tests;

     

       0
        
       
     

       0
        
       
     

       43
        
       

     

       44
        
           updateScript = gitUpdater {

     

       45
        
             rev-prefix = "v";

pkgs/by-name/in/incus-unwrapped/package.nix

···

       11
        
       , udev

     

       12
        
       , installShellFiles

     

       13
        
       , nix-update-script

     

       0
        
       
     

       14
        
       }:

     

       15
        
       

     

       16
        
       buildGoModule rec {

     
···

       79
        
         '';

     

       80
        
       

     

       81
        
         passthru = {

     

       0
        
       
     

       0
        
       
     

       82
        
           updateScript = nix-update-script {

     

       83
        
              extraArgs = [

     

       84
        
               "-vr" "incus-\(.*\)"

···

       11
        
       , udev

     

       12
        
       , installShellFiles

     

       13
        
       , nix-update-script

     

       14
       +
       , nixosTests

     

       15
        
       }:

     

       16
        
       

     

       17
        
       buildGoModule rec {

     
···

       80
        
         '';

     

       81
        
       

     

       82
        
         passthru = {

     

       83
       +
           tests.incus = nixosTests.incus;

     

       84
       +
       

     

       85
        
           updateScript = nix-update-script {

     

       86
        
              extraArgs = [

     

       87
        
               "-vr" "incus-\(.*\)"

pkgs/by-name/in/incus/package.nix

···

       24
        
       , rsync

     

       25
        
       , spice-gtk

     

       26
        
       , squashfsTools

     

       0
        
       
     

       27
        
       , virtiofsd

     

       28
        
       , xz

     

       29
        
       }:

     
···

       44
        
           qemu-utils

     

       45
        
           rsync

     

       46
        
           squashfsTools

     

       0
        
       
     

       47
        
           virtiofsd

     

       48
        
           xz

     

       49

···

       24
        
       , rsync

     

       25
        
       , spice-gtk

     

       26
        
       , squashfsTools

     

       27
       +
       , util-linux

     

       28
        
       , virtiofsd

     

       29
        
       , xz

     

       30
        
       }:

     
···

       45
        
           qemu-utils

     

       46
        
           rsync

     

       47
        
           squashfsTools

     

       48
       +
           util-linux

     

       49
        
           virtiofsd

     

       50
        
           xz

     

       51

+6 -3

pkgs/by-name/ra/raft-cowsql/package.nix

···

       41
        
       

     

       42
        
         outputs = [ "dev" "out" ];

     

       43
        
       

     

       44
       -
         passthru.tests = {

     

       45
       -
           inherit incus;

     

       46
       -
           updateScript = gitUpdater { };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       47
        
         };

     

       48
        
       

     

       49
        
         meta = with lib; {

···

       41
        
       

     

       42
        
         outputs = [ "dev" "out" ];

     

       43
        
       

     

       44
       +
         passthru = {

     

       45
       +
           inherit (incus) tests;

     

       46
       +
       

     

       47
       +
           updateScript = gitUpdater {

     

       48
       +
             rev-prefix = "v";

     

       49
       +
           };

     

       50
        
         };

     

       51
        
       

     

       52
        
         meta = with lib; {