nixos/tests/podman: move docker tests to separate node

zowoq bbfdc6ce 7a3b6039

Changed files
+31 -32
nixos
tests
podman
+31 -32
nixos/tests/podman/default.nix
···
-
# This test runs podman and checks if simple container starts
-
import ../make-test-python.nix (
{ pkgs, lib, ... }: {
name = "podman";
···
};
nodes = {
-
podman =
-
{ pkgs, ... }:
-
{
-
virtualisation.podman.enable = true;
-
# To test docker socket support
-
virtualisation.podman.dockerSocket.enable = true;
-
environment.systemPackages = [
-
pkgs.docker-client
-
];
-
users.users.alice = {
-
isNormalUser = true;
-
home = "/home/alice";
-
description = "Alice Foobar";
-
extraGroups = [ "podman" ];
-
};
-
users.users.mallory = {
-
isNormalUser = true;
-
home = "/home/mallory";
-
description = "Mallory Foobar";
-
};
};
};
testScript = ''
···
podman.wait_for_unit("sockets.target")
start_all()
with subtest("Run container as root with runc"):
···
assert pid == "2"
with subtest("A podman member can use the docker cli"):
-
podman.succeed(su_cmd("docker version"))
with subtest("Run container via docker cli"):
-
podman.succeed("docker network create default")
-
podman.succeed("tar cv --files-from /dev/null | podman import - scratchimg")
-
podman.succeed(
"docker run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin localhost/scratchimg /bin/sleep 10"
)
-
podman.succeed("docker ps | grep sleeping")
-
podman.succeed("podman ps | grep sleeping")
-
podman.succeed("docker stop sleeping")
-
podman.succeed("docker rm sleeping")
-
podman.succeed("docker network rm default")
with subtest("A podman non-member can not use the docker cli"):
-
podman.fail(su_cmd("docker version", user="mallory"))
# TODO: add docker-compose test
···
import ../make-test-python.nix (
{ pkgs, lib, ... }: {
name = "podman";
···
};
nodes = {
+
podman = { pkgs, ... }: {
+
virtualisation.podman.enable = true;
+
users.users.alice = {
+
isNormalUser = true;
+
};
+
};
+
docker = { pkgs, ... }: {
+
virtualisation.podman.enable = true;
+
+
virtualisation.podman.dockerSocket.enable = true;
+
environment.systemPackages = [
+
pkgs.docker-client
+
];
+
users.users.alice = {
+
isNormalUser = true;
+
extraGroups = [ "podman" ];
+
};
+
users.users.mallory = {
+
isNormalUser = true;
};
+
};
};
testScript = ''
···
podman.wait_for_unit("sockets.target")
+
docker.wait_for_unit("sockets.target")
start_all()
with subtest("Run container as root with runc"):
···
assert pid == "2"
with subtest("A podman member can use the docker cli"):
+
docker.succeed(su_cmd("docker version"))
with subtest("Run container via docker cli"):
+
docker.succeed("docker network create default")
+
docker.succeed("tar cv --files-from /dev/null | podman import - scratchimg")
+
docker.succeed(
"docker run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin localhost/scratchimg /bin/sleep 10"
)
+
docker.succeed("docker ps | grep sleeping")
+
docker.succeed("podman ps | grep sleeping")
+
docker.succeed("docker stop sleeping")
+
docker.succeed("docker rm sleeping")
+
docker.succeed("docker network rm default")
with subtest("A podman non-member can not use the docker cli"):
+
docker.fail(su_cmd("docker version", user="mallory"))
# TODO: add docker-compose test