commit b18b70c74d5a2eadde6985ee9b2fac3411374eb5 · pyrox.dev/nixpkgs

+6 -6
nixos/tests/nat.nix
···

       102
       102
        
       

     

       103
       103
        
               # If we turn off NAT, the client shouldn't be able to reach the server.

     

       104
       104
        
               $router->succeed("${routerDummyNoNatClosure}/bin/switch-to-configuration test 2>&1");

     

       105
       105
       -
               # FIXME: this should not be necessary, but nat.service is not started because

     

       106
       106
       -
               #        network.target is not triggered

     

       107
       107
       -
               #        (https://github.com/NixOS/nixpkgs/issues/16230#issuecomment-226408359)

     

       108
       108
       -
               ${lib.optional (!withFirewall) ''

     

       109
       109
       -
                 $router->succeed("systemctl start nat.service");

     

       110
       110
       -
               ''}

     

       111
       105
        
               $client->fail("curl --fail --connect-timeout 5 http://server/ >&2");

     

       112
       106
        
               $client->fail("ping -c 1 server >&2");

     

       113
       107
        
       

     

       114
       108
        
               # And make sure that reloading the NAT job works.

     

       115
       109
        
               $router->succeed("${routerClosure}/bin/switch-to-configuration test 2>&1");

     

       110
       110
       +
               # FIXME: this should not be necessary, but nat.service is not started because

     

       111
       111
       +
               #        network.target is not triggered

     

       112
       112
       +
               #        (https://github.com/NixOS/nixpkgs/issues/16230#issuecomment-226408359)

     

       113
       113
       +
               ${lib.optionalString (!withFirewall) ''

     

       114
       114
       +
                 $router->succeed("systemctl start nat.service");

     

       115
       115
       +
               ''}

     

       116
       116
        
               $client->succeed("curl --fail http://server/ >&2");

     

       117
       117
        
               $client->succeed("ping -c 1 server >&2");

     

       118
       118
        
             '';