···

       
1
       
-
       
# This test runs podman and checks if simple container starts

     

       
2
       
-
       


     

       
3
       
 
       
import ../make-test-python.nix (

     

       
4
       
 
       
  { pkgs, lib, ... }: {

     

       
5
       
 
       
    name = "podman";

     
···

       
8
       
 
       
    };

     

       
9
       
 
       


     

       
10
       
 
       
    nodes = {

     

       
11
       
-
       
      podman =

     

       
12
       
-
       
        { pkgs, ... }:

     

       
13
       
-
       
        {

     

       
14
       
-
       
          virtualisation.podman.enable = true;

     

       
15
       
 
       


     

       
16
       
-
       
          # To test docker socket support

     

       
17
       
-
       
          virtualisation.podman.dockerSocket.enable = true;

     

       
18
       
-
       
          environment.systemPackages = [

     

       
19
       
-
       
            pkgs.docker-client

     

       
20
       
-
       
          ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
21
       
 
       


     

       
22
       
-
       
          users.users.alice = {

     

       
23
       
-
       
            isNormalUser = true;

     

       
24
       
-
       
            home = "/home/alice";

     

       
25
       
-
       
            description = "Alice Foobar";

     

       
26
       
-
       
            extraGroups = [ "podman" ];

     

       
27
       
-
       
          };

     

       
28
       
 
       


     

       
29
       
-
       
          users.users.mallory = {

     

       
30
       
-
       
            isNormalUser = true;

     

       
31
       
-
       
            home = "/home/mallory";

     

       
32
       
-
       
            description = "Mallory Foobar";

     

       
33
       
-
       
          };

     

       
34
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
35
       
 
       
        };

     

       
0
       
 
       

     

       
36
       
 
       
    };

     

       
37
       
 
       


     

       
38
       
 
       
    testScript = ''

     
···

       
45
       
 
       


     

       
46
       
 
       


     

       
47
       
 
       
      podman.wait_for_unit("sockets.target")

     

       
0
       
 
       

     

       
48
       
 
       
      start_all()

     

       
49
       
 
       


     

       
50
       
 
       
      with subtest("Run container as root with runc"):

     
···

       
120
       
 
       
          assert pid == "2"

     

       
121
       
 
       


     

       
122
       
 
       
      with subtest("A podman member can use the docker cli"):

     

       
123
       
-
       
          podman.succeed(su_cmd("docker version"))

     

       
124
       
 
       


     

       
125
       
 
       
      with subtest("Run container via docker cli"):

     

       
126
       
-
       
          podman.succeed("docker network create default")

     

       
127
       
-
       
          podman.succeed("tar cv --files-from /dev/null | podman import - scratchimg")

     

       
128
       
-
       
          podman.succeed(

     

       
129
       
 
       
            "docker run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin localhost/scratchimg /bin/sleep 10"

     

       
130
       
 
       
          )

     

       
131
       
-
       
          podman.succeed("docker ps | grep sleeping")

     

       
132
       
-
       
          podman.succeed("podman ps | grep sleeping")

     

       
133
       
-
       
          podman.succeed("docker stop sleeping")

     

       
134
       
-
       
          podman.succeed("docker rm sleeping")

     

       
135
       
-
       
          podman.succeed("docker network rm default")

     

       
136
       
 
       


     

       
137
       
 
       
      with subtest("A podman non-member can not use the docker cli"):

     

       
138
       
-
       
          podman.fail(su_cmd("docker version", user="mallory"))

     

       
139
       
 
       


     

       
140
       
 
       
      # TODO: add docker-compose test

     

       
141
       
 
       


     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
1
       
 
       
import ../make-test-python.nix (

     

       
2
       
 
       
  { pkgs, lib, ... }: {

     

       
3
       
 
       
    name = "podman";

     
···

       
6
       
 
       
    };

     

       
7
       
 
       


     

       
8
       
 
       
    nodes = {

     

       
9
       
+
       
      podman = { pkgs, ... }: {

     

       
10
       
+
       
        virtualisation.podman.enable = true;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
11
       
 
       


     

       
12
       
+
       
        users.users.alice = {

     

       
13
       
+
       
          isNormalUser = true;

     

       
14
       
+
       
        };

     

       
15
       
+
       
      };

     

       
16
       
+
       
      docker = { pkgs, ... }: {

     

       
17
       
+
       
        virtualisation.podman.enable = true;

     

       
18
       
+
       


     

       
19
       
+
       
        virtualisation.podman.dockerSocket.enable = true;

     

       
20
       
 
       


     

       
21
       
+
       
        environment.systemPackages = [

     

       
22
       
+
       
          pkgs.docker-client

     

       
23
       
+
       
        ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
24
       
 
       


     

       
25
       
+
       
        users.users.alice = {

     

       
26
       
+
       
          isNormalUser = true;

     

       
27
       
+
       
          extraGroups = [ "podman" ];

     

       
28
       
+
       
        };

     

       
0
       
 
       

     

       
29
       
 
       


     

       
30
       
+
       
        users.users.mallory = {

     

       
31
       
+
       
          isNormalUser = true;

     

       
32
       
 
       
        };

     

       
33
       
+
       
      };

     

       
34
       
 
       
    };

     

       
35
       
 
       


     

       
36
       
 
       
    testScript = ''

     
···

       
43
       
 
       


     

       
44
       
 
       


     

       
45
       
 
       
      podman.wait_for_unit("sockets.target")

     

       
46
       
+
       
      docker.wait_for_unit("sockets.target")

     

       
47
       
 
       
      start_all()

     

       
48
       
 
       


     

       
49
       
 
       
      with subtest("Run container as root with runc"):

     
···

       
119
       
 
       
          assert pid == "2"

     

       
120
       
 
       


     

       
121
       
 
       
      with subtest("A podman member can use the docker cli"):

     

       
122
       
+
       
          docker.succeed(su_cmd("docker version"))

     

       
123
       
 
       


     

       
124
       
 
       
      with subtest("Run container via docker cli"):

     

       
125
       
+
       
          docker.succeed("docker network create default")

     

       
126
       
+
       
          docker.succeed("tar cv --files-from /dev/null | podman import - scratchimg")

     

       
127
       
+
       
          docker.succeed(

     

       
128
       
 
       
            "docker run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin localhost/scratchimg /bin/sleep 10"

     

       
129
       
 
       
          )

     

       
130
       
+
       
          docker.succeed("docker ps | grep sleeping")

     

       
131
       
+
       
          docker.succeed("podman ps | grep sleeping")

     

       
132
       
+
       
          docker.succeed("docker stop sleeping")

     

       
133
       
+
       
          docker.succeed("docker rm sleeping")

     

       
134
       
+
       
          docker.succeed("docker network rm default")

     

       
135
       
 
       


     

       
136
       
 
       
      with subtest("A podman non-member can not use the docker cli"):

     

       
137
       
+
       
          docker.fail(su_cmd("docker version", user="mallory"))

     

       
138
       
 
       


     

       
139
       
 
       
      # TODO: add docker-compose test

     

       
140