···

       
9
       
9
       
 
       
  nodes = {

     

       
10
       
10
       
 
       
    withIftop = {

     

       
11
       
11
       
 
       
      imports = [ ./common/user-account.nix ];

     

       
12
       
12
       
-
       


     

       
13
       
12
       
 
       
      programs.iftop.enable = true;

     

       
14
       
13
       
 
       
    };

     

       
15
       
14
       
 
       
    withoutIftop = {

     

       
16
       
15
       
 
       
      imports = [ ./common/user-account.nix ];

     

       
16
       
16
       
+
       
      environment.systemPackages = [ pkgs.iftop ];

     

       
17
       
17
       
 
       
    };

     

       
18
       
18
       
 
       
  };

     

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
  testScript = ''

     

       
21
       
21
       
 
       
    subtest "machine with iftop enabled", sub {

     

       
22
       
22
       
-
       
      $withIftop->start;

     

       
23
       
23
       
-
       
      $withIftop->succeed("su -l alice -c 'iftop -t -s 1'");

     

       
22
       
22
       
+
       
      $withIftop->waitForUnit("default.target");

     

       
23
       
23
       
+
       
      # limit to eth1 (eth0 is the test driver's control interface)

     

       
24
       
24
       
+
       
      # and don't try name lookups

     

       
25
       
25
       
+
       
      $withIftop->succeed("su -l alice -c 'iftop -t -s 1 -n -i eth1'");

     

       
24
       
26
       
 
       
    };

     

       
25
       
27
       
 
       
    subtest "machine without iftop", sub {

     

       
26
       
26
       
-
       
      $withoutIftop->start;

     

       
27
       
27
       
-
       
      $withoutIftop->mustFail("su -l alice -c 'iftop -t -s 1'");

     

       
28
       
28
       
+
       
      $withoutIftop->waitForUnit("default.target");

     

       
29
       
29
       
+
       
      # check that iftop is there but user alice lacks capabilities

     

       
30
       
30
       
+
       
      $withoutIftop->succeed("iftop -t -s 1 -n -i eth1");

     

       
31
       
31
       
+
       
      $withoutIftop->fail("su -l alice -c 'iftop -t -s 1 -n -i eth1'");

     

       
28
       
32
       
 
       
    };

     

       
29
       
33
       
 
       
  '';

     

       
30
       
34
       
 
       
})