commit a6f1bae94614e1efc007bd61ab9e7279cebc3864 · pyrox.dev/nixpkgs

+121

nixos/tests/akkoma.nix

···

       1
       1
       +
       /*

     

       2
       2
       +
         End-to-end test for Akkoma.

     

       3
       3
       +
       

     

       4
       4
       +
         Based in part on nixos/tests/pleroma.

     

       5
       5
       +
       

     

       6
       6
       +
         TODO: Test federation.

     

       7
       7
       +
       */

     

       8
       8
       +
       import ./make-test-python.nix ({ pkgs, package ? pkgs.akkoma, confined ? false, ... }:

     

       9
       9
       +
       let

     

       10
       10
       +
         userPassword = "4LKOrGo8SgbPm1a6NclVU5Wb";

     

       11
       11
       +
       

     

       12
       12
       +
         provisionUser = pkgs.writers.writeBashBin "provisionUser" ''

     

       13
       13
       +
           set -eu -o errtrace -o pipefail

     

       14
       14
       +
       

     

       15
       15
       +
           pleroma_ctl user new jamy jamy@nixos.test --password '${userPassword}' --moderator --admin -y

     

       16
       16
       +
         '';

     

       17
       17
       +
       

     

       18
       18
       +
         tlsCert = pkgs.runCommand "selfSignedCerts" {

     

       19
       19
       +
           nativeBuildInputs = with pkgs; [ openssl ];

     

       20
       20
       +
         } ''

     

       21
       21
       +
           mkdir -p $out

     

       22
       22
       +
           openssl req -x509 \

     

       23
       23
       +
             -subj '/CN=akkoma.nixos.test/' -days 49710 \

     

       24
       24
       +
             -addext 'subjectAltName = DNS:akkoma.nixos.test' \

     

       25
       25
       +
             -keyout "$out/key.pem" -newkey ed25519 \

     

       26
       26
       +
             -out "$out/cert.pem" -noenc

     

       27
       27
       +
         '';

     

       28
       28
       +
       

     

       29
       29
       +
         sendToot = pkgs.writers.writeBashBin "sendToot" ''

     

       30
       30
       +
           set -eu -o errtrace -o pipefail

     

       31
       31
       +
       

     

       32
       32
       +
           export REQUESTS_CA_BUNDLE="/etc/ssl/certs/ca-certificates.crt"

     

       33
       33
       +
       

     

       34
       34
       +
           echo '${userPassword}' | ${pkgs.toot}/bin/toot login_cli -i "akkoma.nixos.test" -e "jamy@nixos.test"

     

       35
       35
       +
           echo "y" | ${pkgs.toot}/bin/toot post "hello world Jamy here"

     

       36
       36
       +
           echo "y" | ${pkgs.toot}/bin/toot timeline | grep -F -q "hello world Jamy here"

     

       37
       37
       +
       

     

       38
       38
       +
           # Test file upload

     

       39
       39
       +
           echo "y" | ${pkgs.toot}/bin/toot upload <(dd if=/dev/zero bs=1024 count=1024 status=none) \

     

       40
       40
       +
             | grep -F -q "https://akkoma.nixos.test/media"

     

       41
       41
       +
         '';

     

       42
       42
       +
       

     

       43
       43
       +
         checkFe = pkgs.writers.writeBashBin "checkFe" ''

     

       44
       44
       +
           set -eu -o errtrace -o pipefail

     

       45
       45
       +
       

     

       46
       46
       +
           paths=( / /static/{config,styles}.json /pleroma/admin/ )

     

       47
       47
       +
       

     

       48
       48
       +
           for path in "''${paths[@]}"; do

     

       49
       49
       +
             diff \

     

       50
       50
       +
               <(${pkgs.curl}/bin/curl -f -S -s -o /dev/null -w '%{response_code}' "https://akkoma.nixos.test$path") \

     

       51
       51
       +
               <(echo -n 200)

     

       52
       52
       +
           done

     

       53
       53
       +
         '';

     

       54
       54
       +
       

     

       55
       55
       +
         hosts = nodes: ''

     

       56
       56
       +
           ${nodes.akkoma.networking.primaryIPAddress} akkoma.nixos.test

     

       57
       57
       +
           ${nodes.client.networking.primaryIPAddress} client.nixos.test

     

       58
       58
       +
         '';

     

       59
       59
       +
       in

     

       60
       60
       +
       {

     

       61
       61
       +
         name = "akkoma";

     

       62
       62
       +
         nodes = {

     

       63
       63
       +
           client = { nodes, pkgs, config, ... }: {

     

       64
       64
       +
             security.pki.certificateFiles = [ "${tlsCert}/cert.pem" ];

     

       65
       65
       +
             networking.extraHosts = hosts nodes;

     

       66
       66
       +
           };

     

       67
       67
       +
       

     

       68
       68
       +
           akkoma = { nodes, pkgs, config, ... }: {

     

       69
       69
       +
             networking.extraHosts = hosts nodes;

     

       70
       70
       +
             networking.firewall.allowedTCPPorts = [ 443 ];

     

       71
       71
       +
             environment.systemPackages = with pkgs; [ provisionUser ];

     

       72
       72
       +
             systemd.services.akkoma.confinement.enable = confined;

     

       73
       73
       +
       

     

       74
       74
       +
             services.akkoma = {

     

       75
       75
       +
               enable = true;

     

       76
       76
       +
               package = package;

     

       77
       77
       +
               config = {

     

       78
       78
       +
                 ":pleroma" = {

     

       79
       79
       +
                   ":instance" = {

     

       80
       80
       +
                     name = "NixOS test Akkoma server";

     

       81
       81
       +
                     description = "NixOS test Akkoma server";

     

       82
       82
       +
                     email = "akkoma@nixos.test";

     

       83
       83
       +
                     notify_email = "akkoma@nixos.test";

     

       84
       84
       +
                     registration_open = true;

     

       85
       85
       +
                   };

     

       86
       86
       +
       

     

       87
       87
       +
                   ":media_proxy" = {

     

       88
       88
       +
                     enabled = false;

     

       89
       89
       +
                   };

     

       90
       90
       +
       

     

       91
       91
       +
                   "Pleroma.Web.Endpoint" = {

     

       92
       92
       +
                     url.host = "akkoma.nixos.test";

     

       93
       93
       +
                   };

     

       94
       94
       +
                 };

     

       95
       95
       +
               };

     

       96
       96
       +
       

     

       97
       97
       +
               nginx = {

     

       98
       98
       +
                 addSSL = true;

     

       99
       99
       +
                 sslCertificate = "${tlsCert}/cert.pem";

     

       100
       100
       +
                 sslCertificateKey = "${tlsCert}/key.pem";

     

       101
       101
       +
               };

     

       102
       102
       +
             };

     

       103
       103
       +
       

     

       104
       104
       +
             services.nginx.enable = true;

     

       105
       105
       +
             services.postgresql.enable = true;

     

       106
       106
       +
           };

     

       107
       107
       +
         };

     

       108
       108
       +
       

     

       109
       109
       +
         testScript = { nodes, ... }: ''

     

       110
       110
       +
           start_all()

     

       111
       111
       +
           akkoma.wait_for_unit('akkoma-initdb.service')

     

       112
       112
       +
           akkoma.systemctl('restart akkoma-initdb.service')  # test repeated initialisation

     

       113
       113
       +
           akkoma.wait_for_unit('akkoma.service')

     

       114
       114
       +
           akkoma.wait_for_file('/run/akkoma/socket');

     

       115
       115
       +
           akkoma.succeed('${provisionUser}/bin/provisionUser')

     

       116
       116
       +
           akkoma.wait_for_unit('nginx.service')

     

       117
       117
       +
           client.succeed('${sendToot}/bin/sendToot')

     

       118
       118
       +
           client.succeed('${checkFe}/bin/checkFe')

     

       119
       119
       +
         '';

     

       120
       120
       +
       })

     

       121
       121
       +

nixos/tests/all-tests.nix

···

       73
       73
        
         agate = runTest ./web-servers/agate.nix;

     

       74
       74
        
         agda = handleTest ./agda.nix {};

     

       75
       75
        
         airsonic = handleTest ./airsonic.nix {};

     

       76
       76
       +
         akkoma = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./akkoma.nix {};

     

       77
       77
       +
         akkoma-confined = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./akkoma.nix { confined = true; };

     

       76
       78
        
         allTerminfo = handleTest ./all-terminfo.nix {};

     

       77
       79
        
         alps = handleTest ./alps.nix {};

     

       78
       80
        
         amazon-init-shell = handleTest ./amazon-init-shell.nix {};

pkgs/servers/akkoma/default.nix

···

       3
       3
        
       , fetchFromGitea, fetchFromGitHub, fetchFromGitLab

     

       4
       4
        
       , cmake, file, libxcrypt

     

       5
       5
        
       , writeText

     

       6
       6
       +
       , nixosTests

     

       6
       7
        
       , ...

     

       7
       8
        
       }:

     

       8
       9
        
       

     
···

       198
       199
        
               '';

     

       199
       200
        
             };

     

       200
       201
        
           });

     

       202
       202
       +
         };

     

       203
       203
       +
       

     

       204
       204
       +
         passthru = {

     

       205
       205
       +
           tests = with nixosTests; { inherit akkoma akkoma-confined; };

     

       206
       206
       +
           inherit mixNixDeps;

     

       201
       207
        
         };

     

       202
       208
        
       

     

       203
       209
        
         meta = with lib; {