commit 748a3d52661f932fb4531ace0af05fc22305ff3c · pyrox.dev/nixpkgs

+1 -1

nixos/tests/all-tests.nix

···

       474
        
         activation-etc-overlay-immutable = runTest ./activation/etc-overlay-immutable.nix;

     

       475
        
         activation-perlless = runTest ./activation/perlless.nix;

     

       476
        
         etcd = runTestOn [ "aarch64-linux" "x86_64-linux" ] ./etcd/etcd.nix;

     

       477
       -
         etcd-cluster = handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./etcd/etcd-cluster.nix { };

     

       478
        
         etebase-server = runTest ./etebase-server.nix;

     

       479
        
         etesync-dav = runTest ./etesync-dav.nix;

     

       480
        
         evcc = runTest ./evcc.nix;

···

       474
        
         activation-etc-overlay-immutable = runTest ./activation/etc-overlay-immutable.nix;

     

       475
        
         activation-perlless = runTest ./activation/perlless.nix;

     

       476
        
         etcd = runTestOn [ "aarch64-linux" "x86_64-linux" ] ./etcd/etcd.nix;

     

       477
       +
         etcd-cluster = runTestOn [ "aarch64-linux" "x86_64-linux" ] ./etcd/etcd-cluster.nix;

     

       478
        
         etebase-server = runTest ./etebase-server.nix;

     

       479
        
         etesync-dav = runTest ./etesync-dav.nix;

     

       480
        
         evcc = runTest ./evcc.nix;

+151 -156

nixos/tests/etcd/etcd-cluster.nix

···

       1
        
       # This test runs simple etcd cluster

     

       2
        
       

     

       3
       -
       import ../make-test-python.nix (

     

       4
       -
         { pkgs, ... }:

     

       5
       -
         let

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       6
        
       

     

       7
       -
           runWithOpenSSL =

     

       8
       -
             file: cmd:

     

       9
       -
             pkgs.runCommand file {

     

       10
       -
               buildInputs = [ pkgs.openssl ];

     

       11
       -
             } cmd;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       12
        
       

     

       13
       -
           ca_key = runWithOpenSSL "ca-key.pem" "openssl genrsa -out $out 2048";

     

       14
       -
           ca_pem = runWithOpenSSL "ca.pem" ''

     

       15
       -
             openssl req \

     

       16
       -
               -x509 -new -nodes -key ${ca_key} \

     

       17
       -
               -days 10000 -out $out -subj "/CN=etcd-ca"

     

       18
       -
           '';

     

       19
       -
           etcd_key = runWithOpenSSL "etcd-key.pem" "openssl genrsa -out $out 2048";

     

       20
       -
           etcd_csr = runWithOpenSSL "etcd.csr" ''

     

       21
       -
             openssl req \

     

       22
       -
                -new -key ${etcd_key} \

     

       23
       -
                -out $out -subj "/CN=etcd" \

     

       24
       -
                -config ${openssl_cnf}

     

       25
       -
           '';

     

       26
       -
           etcd_cert = runWithOpenSSL "etcd.pem" ''

     

       27
       -
             openssl x509 \

     

       28
       -
               -req -in ${etcd_csr} \

     

       29
       -
               -CA ${ca_pem} -CAkey ${ca_key} \

     

       30
       -
               -CAcreateserial -out $out \

     

       31
       -
               -days 365 -extensions v3_req \

     

       32
       -
               -extfile ${openssl_cnf}

     

       33
       -
           '';

     

       34
        
       

     

       35
       -
           etcd_client_key = runWithOpenSSL "etcd-client-key.pem" "openssl genrsa -out $out 2048";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       36
        
       

     

       37
       -
           etcd_client_csr = runWithOpenSSL "etcd-client-key.pem" ''

     

       38
       -
             openssl req \

     

       39
       -
               -new -key ${etcd_client_key} \

     

       40
       -
               -out $out -subj "/CN=etcd-client" \

     

       41
       -
               -config ${client_openssl_cnf}

     

       42
       -
           '';

     

       43
       -
       

     

       44
       -
           etcd_client_cert = runWithOpenSSL "etcd-client.crt" ''

     

       45
       -
             openssl x509 \

     

       46
       -
               -req -in ${etcd_client_csr} \

     

       47
       -
               -CA ${ca_pem} -CAkey ${ca_key} -CAcreateserial \

     

       48
       -
               -out $out -days 365 -extensions v3_req \

     

       49
       -
               -extfile ${client_openssl_cnf}

     

       50
       -
           '';

     

       51
        
       

     

       52
       -
           openssl_cnf = pkgs.writeText "openssl.cnf" ''

     

       53
       -
             ions = v3_req

     

       54
       -
             distinguished_name = req_distinguished_name

     

       55
       -
             [req_distinguished_name]

     

       56
       -
             [ v3_req ]

     

       57
       -
             basicConstraints = CA:FALSE

     

       58
       -
             keyUsage = digitalSignature, keyEncipherment

     

       59
       -
             extendedKeyUsage = serverAuth, clientAuth

     

       60
       -
             subjectAltName = @alt_names

     

       61
       -
             [alt_names]

     

       62
       -
             DNS.1 = node1

     

       63
       -
             DNS.2 = node2

     

       64
       -
             DNS.3 = node3

     

       65
       -
             IP.1 = 127.0.0.1

     

       66
       -
           '';

     

       67
        
       

     

       68
       -
           client_openssl_cnf = pkgs.writeText "client-openssl.cnf" ''

     

       69
       -
             ions = v3_req

     

       70
       -
             distinguished_name = req_distinguished_name

     

       71
       -
             [req_distinguished_name]

     

       72
       -
             [ v3_req ]

     

       73
       -
             basicConstraints = CA:FALSE

     

       74
       -
             keyUsage = digitalSignature, keyEncipherment

     

       75
       -
             extendedKeyUsage = clientAuth

     

       76
       -
           '';

     

       77
        
       

     

       78
       -
           nodeConfig = {

     

       79
       -
             services = {

     

       80
       -
               etcd = {

     

       81
       -
                 enable = true;

     

       82
       -
                 keyFile = etcd_key;

     

       83
       -
                 certFile = etcd_cert;

     

       84
       -
                 trustedCaFile = ca_pem;

     

       85
       -
                 clientCertAuth = true;

     

       86
       -
                 listenClientUrls = [ "https://127.0.0.1:2379" ];

     

       87
       -
                 listenPeerUrls = [ "https://0.0.0.0:2380" ];

     

       88
       -
               };

     

       89
        
             };

     

       0
        
       
     

       90
        
       

     

       91
       -
             environment.variables = {

     

       92
       -
               ETCD_CERT_FILE = "${etcd_client_cert}";

     

       93
       -
               ETCD_KEY_FILE = "${etcd_client_key}";

     

       94
       -
               ETCD_CA_FILE = "${ca_pem}";

     

       95
       -
               ETCDCTL_ENDPOINTS = "https://127.0.0.1:2379";

     

       96
       -
               ETCDCTL_CACERT = "${ca_pem}";

     

       97
       -
               ETCDCTL_CERT = "${etcd_cert}";

     

       98
       -
               ETCDCTL_KEY = "${etcd_key}";

     

       99
       -
             };

     

       100
        
       

     

       101
       -
             networking.firewall.allowedTCPPorts = [ 2380 ];

     

       102
       -
           };

     

       103
       -
         in

     

       104
       -
         {

     

       105
       -
           name = "etcd-cluster";

     

       106
        
       

     

       107
       -
           meta = with pkgs.lib.maintainers; {

     

       108
       -
             maintainers = [ offline ];

     

       109
       -
           };

     

       110
        
       

     

       111
       -
           nodes = {

     

       112
       -
             node1 =

     

       113
       -
               { ... }:

     

       114
       -
               {

     

       115
       -
                 require = [ nodeConfig ];

     

       116
       -
                 services.etcd = {

     

       117
       -
                   initialCluster = [

     

       118
       -
                     "node1=https://node1:2380"

     

       119
       -
                     "node2=https://node2:2380"

     

       120
       -
                   ];

     

       121
       -
                   initialAdvertisePeerUrls = [ "https://node1:2380" ];

     

       122
       -
                 };

     

       123
        
               };

     

       0
        
       
     

       124
        
       

     

       125
       -
             node2 =

     

       126
       -
               { ... }:

     

       127
       -
               {

     

       128
       -
                 require = [ nodeConfig ];

     

       129
       -
                 services.etcd = {

     

       130
       -
                   initialCluster = [

     

       131
       -
                     "node1=https://node1:2380"

     

       132
       -
                     "node2=https://node2:2380"

     

       133
       -
                   ];

     

       134
       -
                   initialAdvertisePeerUrls = [ "https://node2:2380" ];

     

       135
       -
                 };

     

       136
        
               };

     

       0
        
       
     

       137
        
       

     

       138
       -
             node3 =

     

       139
       -
               { ... }:

     

       140
       -
               {

     

       141
       -
                 require = [ nodeConfig ];

     

       142
       -
                 services.etcd = {

     

       143
       -
                   initialCluster = [

     

       144
       -
                     "node1=https://node1:2380"

     

       145
       -
                     "node2=https://node2:2380"

     

       146
       -
                     "node3=https://node3:2380"

     

       147
       -
                   ];

     

       148
       -
                   initialAdvertisePeerUrls = [ "https://node3:2380" ];

     

       149
       -
                   initialClusterState = "existing";

     

       150
       -
                 };

     

       151
        
               };

     

       152
       -
           };

     

       0
        
       
     

       153
        
       

     

       154
       -
           testScript = ''

     

       155
       -
             with subtest("should start etcd cluster"):

     

       156
       -
                 node1.start()

     

       157
       -
                 node2.start()

     

       158
       -
                 node1.wait_for_unit("etcd.service")

     

       159
       -
                 node2.wait_for_unit("etcd.service")

     

       160
       -
                 node2.wait_until_succeeds("etcdctl endpoint status")

     

       161
       -
                 node1.succeed("etcdctl put /foo/bar 'Hello world'")

     

       162
       -
                 node2.succeed("etcdctl get /foo/bar | grep 'Hello world'")

     

       163
        
       

     

       164
       -
             with subtest("should add another member"):

     

       165
       -
                 node1.wait_until_succeeds("etcdctl member add node3 --peer-urls=https://node3:2380")

     

       166
       -
                 node3.start()

     

       167
       -
                 node3.wait_for_unit("etcd.service")

     

       168
       -
                 node3.wait_until_succeeds("etcdctl member list | grep 'node3'")

     

       169
       -
                 node3.succeed("etcdctl endpoint status")

     

       170
        
       

     

       171
       -
             with subtest("should survive member crash"):

     

       172
       -
                 node3.crash()

     

       173
       -
                 node1.succeed("etcdctl endpoint status")

     

       174
       -
                 node1.succeed("etcdctl put /foo/bar 'Hello degraded world'")

     

       175
       -
                 node1.succeed("etcdctl get /foo/bar | grep 'Hello degraded world'")

     

       176
       -
           '';

     

       177
       -
         }

     

       178
       -
       )

···

       1
        
       # This test runs simple etcd cluster

     

       2
        
       

     

       3
       +
       { lib, pkgs, ... }:

     

       4
       +
       let

     

       5
       +
         runWithOpenSSL =

     

       6
       +
           file: cmd:

     

       7
       +
           pkgs.runCommand file {

     

       8
       +
             buildInputs = [ pkgs.openssl ];

     

       9
       +
           } cmd;

     

       10
        
       

     

       11
       +
         ca_key = runWithOpenSSL "ca-key.pem" "openssl genrsa -out $out 2048";

     

       12
       +
         ca_pem = runWithOpenSSL "ca.pem" ''

     

       13
       +
           openssl req \

     

       14
       +
             -x509 -new -nodes -key ${ca_key} \

     

       15
       +
             -days 10000 -out $out -subj "/CN=etcd-ca"

     

       16
       +
         '';

     

       17
       +
         etcd_key = runWithOpenSSL "etcd-key.pem" "openssl genrsa -out $out 2048";

     

       18
       +
         etcd_csr = runWithOpenSSL "etcd.csr" ''

     

       19
       +
           openssl req \

     

       20
       +
              -new -key ${etcd_key} \

     

       21
       +
              -out $out -subj "/CN=etcd" \

     

       22
       +
              -config ${openssl_cnf}

     

       23
       +
         '';

     

       24
       +
         etcd_cert = runWithOpenSSL "etcd.pem" ''

     

       25
       +
           openssl x509 \

     

       26
       +
             -req -in ${etcd_csr} \

     

       27
       +
             -CA ${ca_pem} -CAkey ${ca_key} \

     

       28
       +
             -CAcreateserial -out $out \

     

       29
       +
             -days 365 -extensions v3_req \

     

       30
       +
             -extfile ${openssl_cnf}

     

       31
       +
         '';

     

       32
        
       

     

       33
       +
         etcd_client_key = runWithOpenSSL "etcd-client-key.pem" "openssl genrsa -out $out 2048";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       34
        
       

     

       35
       +
         etcd_client_csr = runWithOpenSSL "etcd-client-key.pem" ''

     

       36
       +
           openssl req \

     

       37
       +
             -new -key ${etcd_client_key} \

     

       38
       +
             -out $out -subj "/CN=etcd-client" \

     

       39
       +
             -config ${client_openssl_cnf}

     

       40
       +
         '';

     

       41
        
       

     

       42
       +
         etcd_client_cert = runWithOpenSSL "etcd-client.crt" ''

     

       43
       +
           openssl x509 \

     

       44
       +
             -req -in ${etcd_client_csr} \

     

       45
       +
             -CA ${ca_pem} -CAkey ${ca_key} -CAcreateserial \

     

       46
       +
             -out $out -days 365 -extensions v3_req \

     

       47
       +
             -extfile ${client_openssl_cnf}

     

       48
       +
         '';

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       49
        
       

     

       50
       +
         openssl_cnf = pkgs.writeText "openssl.cnf" ''

     

       51
       +
           ions = v3_req

     

       52
       +
           distinguished_name = req_distinguished_name

     

       53
       +
           [req_distinguished_name]

     

       54
       +
           [ v3_req ]

     

       55
       +
           basicConstraints = CA:FALSE

     

       56
       +
           keyUsage = digitalSignature, keyEncipherment

     

       57
       +
           extendedKeyUsage = serverAuth, clientAuth

     

       58
       +
           subjectAltName = @alt_names

     

       59
       +
           [alt_names]

     

       60
       +
           DNS.1 = node1

     

       61
       +
           DNS.2 = node2

     

       62
       +
           DNS.3 = node3

     

       63
       +
           IP.1 = 127.0.0.1

     

       64
       +
         '';

     

       65
        
       

     

       66
       +
         client_openssl_cnf = pkgs.writeText "client-openssl.cnf" ''

     

       67
       +
           ions = v3_req

     

       68
       +
           distinguished_name = req_distinguished_name

     

       69
       +
           [req_distinguished_name]

     

       70
       +
           [ v3_req ]

     

       71
       +
           basicConstraints = CA:FALSE

     

       72
       +
           keyUsage = digitalSignature, keyEncipherment

     

       73
       +
           extendedKeyUsage = clientAuth

     

       74
       +
         '';

     

       75
        
       

     

       76
       +
         nodeConfig = {

     

       77
       +
           services = {

     

       78
       +
             etcd = {

     

       79
       +
               enable = true;

     

       80
       +
               keyFile = etcd_key;

     

       81
       +
               certFile = etcd_cert;

     

       82
       +
               trustedCaFile = ca_pem;

     

       83
       +
               clientCertAuth = true;

     

       84
       +
               listenClientUrls = [ "https://127.0.0.1:2379" ];

     

       85
       +
               listenPeerUrls = [ "https://0.0.0.0:2380" ];

     

       0
        
       
     

       86
        
             };

     

       87
       +
           };

     

       88
        
       

     

       89
       +
           environment.variables = {

     

       90
       +
             ETCD_CERT_FILE = "${etcd_client_cert}";

     

       91
       +
             ETCD_KEY_FILE = "${etcd_client_key}";

     

       92
       +
             ETCD_CA_FILE = "${ca_pem}";

     

       93
       +
             ETCDCTL_ENDPOINTS = "https://127.0.0.1:2379";

     

       94
       +
             ETCDCTL_CACERT = "${ca_pem}";

     

       95
       +
             ETCDCTL_CERT = "${etcd_cert}";

     

       96
       +
             ETCDCTL_KEY = "${etcd_key}";

     

       97
       +
           };

     

       98
        
       

     

       99
       +
           networking.firewall.allowedTCPPorts = [ 2380 ];

     

       100
       +
         };

     

       101
       +
       in

     

       102
       +
       {

     

       103
       +
         name = "etcd-cluster";

     

       104
        
       

     

       105
       +
         meta.maintainers = with lib.maintainers; [ offline ];

     

       0
        
       
     

       0
        
       
     

       106
        
       

     

       107
       +
         nodes = {

     

       108
       +
           node1 =

     

       109
       +
             { ... }:

     

       110
       +
             {

     

       111
       +
               require = [ nodeConfig ];

     

       112
       +
               services.etcd = {

     

       113
       +
                 initialCluster = [

     

       114
       +
                   "node1=https://node1:2380"

     

       115
       +
                   "node2=https://node2:2380"

     

       116
       +
                 ];

     

       117
       +
                 initialAdvertisePeerUrls = [ "https://node1:2380" ];

     

       0
        
       
     

       118
        
               };

     

       119
       +
             };

     

       120
        
       

     

       121
       +
           node2 =

     

       122
       +
             { ... }:

     

       123
       +
             {

     

       124
       +
               require = [ nodeConfig ];

     

       125
       +
               services.etcd = {

     

       126
       +
                 initialCluster = [

     

       127
       +
                   "node1=https://node1:2380"

     

       128
       +
                   "node2=https://node2:2380"

     

       129
       +
                 ];

     

       130
       +
                 initialAdvertisePeerUrls = [ "https://node2:2380" ];

     

       0
        
       
     

       131
        
               };

     

       132
       +
             };

     

       133
        
       

     

       134
       +
           node3 =

     

       135
       +
             { ... }:

     

       136
       +
             {

     

       137
       +
               require = [ nodeConfig ];

     

       138
       +
               services.etcd = {

     

       139
       +
                 initialCluster = [

     

       140
       +
                   "node1=https://node1:2380"

     

       141
       +
                   "node2=https://node2:2380"

     

       142
       +
                   "node3=https://node3:2380"

     

       143
       +
                 ];

     

       144
       +
                 initialAdvertisePeerUrls = [ "https://node3:2380" ];

     

       145
       +
                 initialClusterState = "existing";

     

       0
        
       
     

       146
        
               };

     

       147
       +
             };

     

       148
       +
         };

     

       149
        
       

     

       150
       +
         testScript = ''

     

       151
       +
           with subtest("should start etcd cluster"):

     

       152
       +
               node1.start()

     

       153
       +
               node2.start()

     

       154
       +
               node1.wait_for_unit("etcd.service")

     

       155
       +
               node2.wait_for_unit("etcd.service")

     

       156
       +
               node2.wait_until_succeeds("etcdctl endpoint status")

     

       157
       +
               node1.succeed("etcdctl put /foo/bar 'Hello world'")

     

       158
       +
               node2.succeed("etcdctl get /foo/bar | grep 'Hello world'")

     

       159
        
       

     

       160
       +
           with subtest("should add another member"):

     

       161
       +
               node1.wait_until_succeeds("etcdctl member add node3 --peer-urls=https://node3:2380")

     

       162
       +
               node3.start()

     

       163
       +
               node3.wait_for_unit("etcd.service")

     

       164
       +
               node3.wait_until_succeeds("etcdctl member list | grep 'node3'")

     

       165
       +
               node3.succeed("etcdctl endpoint status")

     

       166
        
       

     

       167
       +
           with subtest("should survive member crash"):

     

       168
       +
               node3.crash()

     

       169
       +
               node1.succeed("etcdctl endpoint status")

     

       170
       +
               node1.succeed("etcdctl put /foo/bar 'Hello degraded world'")

     

       171
       +
               node1.succeed("etcdctl get /foo/bar | grep 'Hello degraded world'")

     

       172
       +
         '';

     

       173
       +
       }

     

       0