commit bdbaaad7de60241f5763cc0735fb6b2a4a727b9e · pyrox.dev/nixpkgs

+41
nixos/tests/installer.nix
···

       461
       461
        
             '';

     

       462
       462
        
           };

     

       463
       463
        
       

     

       464
       464
       +
         # Test whether opening encrypted filesystem with keyfile

     

       465
       465
       +
         # Checks for regression of missing cryptsetup, when no luks device without

     

       466
       466
       +
         # keyfile is configured

     

       467
       467
       +
         filesystemEncryptedWithKeyfile = makeInstallerTest "filesystemEncryptedWithKeyfile"

     

       468
       468
       +
           { createPartitions = ''

     

       469
       469
       +
              $machine->succeed(

     

       470
       470
       +
                 "parted /dev/vda mklabel msdos",

     

       471
       471
       +
                 "parted /dev/vda -- mkpart primary ext2 1M 50MB", # /boot

     

       472
       472
       +
                 "parted /dev/vda -- mkpart primary linux-swap 50M 1024M",

     

       473
       473
       +
                 "parted /dev/vda -- mkpart primary 1024M 1280M", # LUKS with keyfile

     

       474
       474
       +
                 "parted /dev/vda -- mkpart primary 1280M -1s",

     

       475
       475
       +
                 "udevadm settle",

     

       476
       476
       +
                 "mkswap /dev/vda2 -L swap",

     

       477
       477
       +
                 "swapon -L swap",

     

       478
       478
       +
                 "mkfs.ext3 -L nixos /dev/vda4",

     

       479
       479
       +
                 "mount LABEL=nixos /mnt",

     

       480
       480
       +
                 "mkfs.ext3 -L boot /dev/vda1",

     

       481
       481
       +
                 "mkdir -p /mnt/boot",

     

       482
       482
       +
                 "mount LABEL=boot /mnt/boot",

     

       483
       483
       +
                 "modprobe dm_mod dm_crypt",

     

       484
       484
       +
                 "echo -n supersecret > /mnt/keyfile",

     

       485
       485
       +
                 "cryptsetup luksFormat -q /dev/vda3 --key-file /mnt/keyfile",

     

       486
       486
       +
                 "cryptsetup luksOpen --key-file /mnt/keyfile /dev/vda3 crypt",

     

       487
       487
       +
                 "mkfs.ext3 -L test /dev/mapper/crypt",

     

       488
       488
       +
                 "cryptsetup luksClose crypt",

     

       489
       489
       +
                 "mkdir -p /mnt/test"

     

       490
       490
       +
               );

     

       491
       491
       +
             '';

     

       492
       492
       +
             extraConfig = ''

     

       493
       493
       +
               fileSystems."/test" =

     

       494
       494
       +
               { device = "/dev/disk/by-label/test";

     

       495
       495
       +
                 fsType = "ext3";

     

       496
       496
       +
                 encrypted.enable = true;

     

       497
       497
       +
                 encrypted.blkDev = "/dev/vda3";

     

       498
       498
       +
                 encrypted.label = "crypt";

     

       499
       499
       +
                 encrypted.keyFile = "/mnt-root/keyfile";

     

       500
       500
       +
               };

     

       501
       501
       +
             '';

     

       502
       502
       +
           };

     

       503
       503
       +
       

     

       504
       504
       +
       

     

       464
       505
        
         swraid = makeInstallerTest "swraid"

     

       465
       506
        
           { createPartitions =

     

       466
       507
        
               ''