commit c249dcf2f3f88308c7e3ec621ea1efa954da76f8 · pyrox.dev/nixpkgs

+1 -1

nixos/tests/all-tests.nix

···

       212
       212
        
         boot-stage2 = handleTest ./boot-stage2.nix {};

     

       213
       213
        
         borgbackup = handleTest ./borgbackup.nix {};

     

       214
       214
        
         borgmatic = handleTest ./borgmatic.nix {};

     

       215
       215
       -
         botamusique = handleTest ./botamusique.nix {};

     

       215
       215
       +
         botamusique = runTest ./botamusique.nix;

     

       216
       216
        
         bpf = handleTestOn ["x86_64-linux" "aarch64-linux"] ./bpf.nix {};

     

       217
       217
        
         bpftune = handleTest ./bpftune.nix {};

     

       218
       218
        
         breitbandmessung = handleTest ./breitbandmessung.nix {};

+45 -43

nixos/tests/botamusique.nix

···

       1
       1
       -
       import ./make-test-python.nix (

     

       2
       2
       -
         { pkgs, lib, ... }:

     

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }:

     

       3
       6
        
       

     

       4
       4
       -
         {

     

       5
       5
       -
           name = "botamusique";

     

       6
       6
       -
           meta.maintainers = with lib.maintainers; [ hexa ];

     

       7
       7
       +
       {

     

       8
       8
       +
         name = "botamusique";

     

       9
       9
       +
         meta.maintainers = with lib.maintainers; [ hexa ];

     

       7
       10
        
       

     

       8
       8
       -
           nodes = {

     

       9
       9
       -
             machine =

     

       10
       10
       -
               { config, ... }:

     

       11
       11
       -
               {

     

       12
       12
       -
                 networking.extraHosts = ''

     

       13
       13
       -
                   127.0.0.1 all.api.radio-browser.info

     

       14
       14
       -
                 '';

     

       11
       11
       +
         nodes = {

     

       12
       12
       +
           machine =

     

       13
       13
       +
             { config, ... }:

     

       14
       14
       +
             {

     

       15
       15
       +
               networking.extraHosts = ''

     

       16
       16
       +
                 127.0.0.1 all.api.radio-browser.info

     

       17
       17
       +
               '';

     

       15
       18
        
       

     

       16
       16
       -
                 services.murmur = {

     

       17
       17
       -
                   enable = true;

     

       18
       18
       -
                   registerName = "NixOS tests";

     

       19
       19
       -
                 };

     

       19
       19
       +
               services.murmur = {

     

       20
       20
       +
                 enable = true;

     

       21
       21
       +
                 registerName = "NixOS tests";

     

       22
       22
       +
               };

     

       20
       23
        
       

     

       21
       21
       -
                 services.botamusique = {

     

       22
       22
       -
                   enable = true;

     

       23
       23
       -
                   settings = {

     

       24
       24
       -
                     server = {

     

       25
       25
       -
                       channel = "NixOS tests";

     

       26
       26
       -
                     };

     

       27
       27
       -
                     bot = {

     

       28
       28
       -
                       version = false;

     

       29
       29
       -
                       auto_check_update = false;

     

       30
       30
       -
                     };

     

       24
       24
       +
               services.botamusique = {

     

       25
       25
       +
                 enable = true;

     

       26
       26
       +
                 settings = {

     

       27
       27
       +
                   server = {

     

       28
       28
       +
                     channel = "NixOS tests";

     

       29
       29
       +
                   };

     

       30
       30
       +
                   bot = {

     

       31
       31
       +
                     version = false;

     

       32
       32
       +
                     auto_check_update = false;

     

       31
       33
        
                   };

     

       32
       34
        
                 };

     

       33
       35
        
               };

     

       34
       34
       -
           };

     

       36
       36
       +
             };

     

       37
       37
       +
         };

     

       35
       38
        
       

     

       36
       36
       -
           testScript = ''

     

       37
       37
       -
             start_all()

     

       39
       39
       +
         testScript = ''

     

       40
       40
       +
           start_all()

     

       38
       41
        
       

     

       39
       39
       -
             machine.wait_for_unit("murmur.service")

     

       40
       40
       -
             machine.wait_for_unit("botamusique.service")

     

       42
       42
       +
           machine.wait_for_unit("murmur.service")

     

       43
       43
       +
           machine.wait_for_unit("botamusique.service")

     

       41
       44
        
       

     

       42
       42
       -
             machine.sleep(10)

     

       45
       45
       +
           machine.sleep(10)

     

       43
       46
        
       

     

       44
       44
       -
             machine.wait_until_succeeds(

     

       45
       45
       -
                 "journalctl -u murmur.service -e | grep -q '<1:botamusique(-1)> Authenticated'"

     

       46
       46
       -
             )

     

       47
       47
       +
           machine.wait_until_succeeds(

     

       48
       48
       +
               "journalctl -u murmur.service -e | grep -q '<1:botamusique(-1)> Authenticated'"

     

       49
       49
       +
           )

     

       47
       50
        
       

     

       48
       48
       -
             with subtest("Check systemd hardening"):

     

       49
       49
       -
                 output = machine.execute("systemctl show botamusique.service")[1]

     

       50
       50
       -
                 machine.log(output)

     

       51
       51
       -
                 output = machine.execute("systemd-analyze security botamusique.service")[1]

     

       52
       52
       -
                 machine.log(output)

     

       53
       53
       -
           '';

     

       54
       54
       -
         }

     

       55
       55
       -
       )

     

       51
       51
       +
           with subtest("Check systemd hardening"):

     

       52
       52
       +
               output = machine.execute("systemctl show botamusique.service")[1]

     

       53
       53
       +
               machine.log(output)

     

       54
       54
       +
               output = machine.execute("systemd-analyze security botamusique.service")[1]

     

       55
       55
       +
               machine.log(output)

     

       56
       56
       +
         '';

     

       57
       57
       +
       }