commit b7f1fd5caa1ea4aee3335be3240ec23610e1285e · pyrox.dev/nixpkgs

+57 -6
nixos/tests/syncthing-folders.nix
···

       10
       10
        
             '';

     

       11
       11
        
           idA = genNodeId "a";

     

       12
       12
        
           idB = genNodeId "b";

     

       13
       13
       +
           idC = genNodeId "c";

     

       14
       14
       +
           testPasswordFile = pkgs.writeText "syncthing-test-password" "it's a secret";

     

       13
       15
        
         in

     

       14
       16
        
         {

     

       15
       17
        
           name = "syncthing";

     
···

       23
       25
        
                 cert = "${idA}/cert.pem";

     

       24
       26
        
                 key = "${idA}/key.pem";

     

       25
       27
        
                 settings = {

     

       26
       26
       -
                   devices.b = {

     

       27
       27
       -
                     id = lib.fileContents "${idB}/id";

     

       28
       28
       -
                   };

     

       28
       28
       +
                   devices.b.id = lib.fileContents "${idB}/id";

     

       29
       29
       +
                   devices.c.id = lib.fileContents "${idC}/id";

     

       29
       30
        
                   folders.foo = {

     

       30
       31
        
                     path = "/var/lib/syncthing/foo";

     

       31
       32
        
                     devices = [ "b" ];

     

       32
       33
        
                   };

     

       34
       34
       +
                   folders.bar = {

     

       35
       35
       +
                     path = "/var/lib/syncthing/bar";

     

       36
       36
       +
                     devices.c.encryptionPassword = "${testPasswordFile}";

     

       37
       37
       +
                   };

     

       33
       38
        
                 };

     

       34
       39
        
               };

     

       35
       40
        
             };

     
···

       40
       45
        
                 cert = "${idB}/cert.pem";

     

       41
       46
        
                 key = "${idB}/key.pem";

     

       42
       47
        
                 settings = {

     

       43
       43
       -
                   devices.a = {

     

       44
       44
       -
                     id = lib.fileContents "${idA}/id";

     

       45
       45
       -
                   };

     

       48
       48
       +
                   devices.a.id = lib.fileContents "${idA}/id";

     

       49
       49
       +
                   devices.c.id = lib.fileContents "${idC}/id";

     

       46
       50
        
                   folders.foo = {

     

       47
       51
        
                     path = "/var/lib/syncthing/foo";

     

       48
       52
        
                     devices = [ "a" ];

     

       49
       53
        
                   };

     

       54
       54
       +
                   folders.bar = {

     

       55
       55
       +
                     path = "/var/lib/syncthing/bar";

     

       56
       56
       +
                     devices.c.encryptionPassword = "${testPasswordFile}";

     

       57
       57
       +
                   };

     

       58
       58
       +
                 };

     

       59
       59
       +
               };

     

       60
       60
       +
             };

     

       61
       61
       +
             c = {

     

       62
       62
       +
               services.syncthing = {

     

       63
       63
       +
                 enable = true;

     

       64
       64
       +
                 openDefaultPorts = true;

     

       65
       65
       +
                 cert = "${idC}/cert.pem";

     

       66
       66
       +
                 key = "${idC}/key.pem";

     

       67
       67
       +
                 settings = {

     

       68
       68
       +
                   devices.a.id = lib.fileContents "${idA}/id";

     

       69
       69
       +
                   devices.b.id = lib.fileContents "${idB}/id";

     

       70
       70
       +
                   folders.bar = {

     

       71
       71
       +
                     path = "/var/lib/syncthing/bar";

     

       72
       72
       +
                     devices = [

     

       73
       73
       +
                       "a"

     

       74
       74
       +
                       "b"

     

       75
       75
       +
                     ];

     

       76
       76
       +
                     type = "receiveencrypted";

     

       77
       77
       +
                   };

     

       50
       78
        
                 };

     

       51
       79
        
               };

     

       52
       80
        
             };

     
···

       54
       82
        
       

     

       55
       83
        
           testScript = ''

     

       56
       84
        
             start_all()

     

       85
       85
       +
       

     

       57
       86
        
             a.wait_for_unit("syncthing.service")

     

       58
       87
        
             b.wait_for_unit("syncthing.service")

     

       88
       88
       +
             c.wait_for_unit("syncthing.service")

     

       59
       89
        
             a.wait_for_open_port(22000)

     

       60
       90
        
             b.wait_for_open_port(22000)

     

       91
       91
       +
             c.wait_for_open_port(22000)

     

       92
       92
       +
       

     

       93
       93
       +
             # Test foo

     

       94
       94
       +
       

     

       61
       95
        
             a.wait_for_file("/var/lib/syncthing/foo")

     

       62
       96
        
             b.wait_for_file("/var/lib/syncthing/foo")

     

       97
       97
       +
       

     

       63
       98
        
             a.succeed("echo a2b > /var/lib/syncthing/foo/a2b")

     

       64
       99
        
             b.succeed("echo b2a > /var/lib/syncthing/foo/b2a")

     

       100
       100
       +
       

     

       65
       101
        
             a.wait_for_file("/var/lib/syncthing/foo/b2a")

     

       66
       102
        
             b.wait_for_file("/var/lib/syncthing/foo/a2b")

     

       103
       103
       +
       

     

       104
       104
       +
             # Test bar

     

       105
       105
       +
       

     

       106
       106
       +
             a.wait_for_file("/var/lib/syncthing/bar")

     

       107
       107
       +
             b.wait_for_file("/var/lib/syncthing/bar")

     

       108
       108
       +
             c.wait_for_file("/var/lib/syncthing/bar")

     

       109
       109
       +
       

     

       110
       110
       +
             a.succeed("echo plaincontent > /var/lib/syncthing/bar/plainname")

     

       111
       111
       +
       

     

       112
       112
       +
             # B should be able to decrypt, check that content of file matches

     

       113
       113
       +
             b.wait_for_file("/var/lib/syncthing/bar/plainname")

     

       114
       114
       +
             b.succeed("grep plaincontent /var/lib/syncthing/bar/plainname")

     

       115
       115
       +
       

     

       116
       116
       +
             # Bar on C is untrusted, check that content is not in cleartext

     

       117
       117
       +
             c.fail("grep -R plaincontent /var/lib/syncthing/bar")

     

       67
       118
        
           '';

     

       68
       119
        
         }

     

       69
       120
        
       )