···

       
18
       
 
       


     

       
19
       
 
       
  enableOCR = true;

     

       
20
       
 
       


     

       
21
       
-
       
  machine.imports = [ ./common/x11.nix ];

     

       
22
       
 
       
  machine.virtualisation.memorySize = 2047;

     

       
0
       
 
       

     

       
23
       
 
       
  machine.environment.systemPackages = [ chromiumPkg ];

     

       
24
       
 
       


     

       
25
       
 
       
  startupHTML = pkgs.writeText "chromium-startup.html" ''

     
···

       
43
       
 
       
      xdoScript = pkgs.writeText "${name}.xdo" text;

     

       
44
       
 
       
    in "${pkgs.xdotool}/bin/xdotool '${xdoScript}'";

     

       
45
       
 
       
  in ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
46
       
 
       
    sub createNewWin {

     

       
47
       
 
       
      $machine->nest("creating a new Chromium window", sub {

     

       
48
       
-
       
        $machine->execute("${xdo "new-window" ''

     

       
49
       
 
       
          search --onlyvisible --name "startup done"

     

       
50
       
 
       
          windowfocus --sync

     

       
51
       
 
       
          windowactivate --sync

     

       
52
       
 
       
        ''}");

     

       
53
       
-
       
        $machine->execute("${xdo "new-window" ''

     

       
54
       
 
       
          key Ctrl+n

     

       
55
       
 
       
        ''}");

     

       
56
       
 
       
      });

     
···

       
58
       
 
       


     

       
59
       
 
       
    sub closeWin {

     

       
60
       
 
       
      Machine::retry sub {

     

       
61
       
-
       
        $machine->execute("${xdo "close-window" ''

     

       
62
       
 
       
          search --onlyvisible --name "new tab"

     

       
63
       
 
       
          windowfocus --sync

     

       
64
       
 
       
          windowactivate --sync

     

       
65
       
 
       
        ''}");

     

       
66
       
-
       
        $machine->execute("${xdo "close-window" ''

     

       
67
       
 
       
          key Ctrl+w

     

       
68
       
 
       
        ''}");

     

       
69
       
 
       
        for (1..20) {

     

       
70
       
-
       
          my ($status, $out) = $machine->execute("${xdo "wait-for-close" ''

     

       
71
       
 
       
            search --onlyvisible --name "new tab"

     

       
72
       
 
       
          ''}");

     

       
73
       
 
       
          return 1 if $status != 0;

     
···

       
80
       
 
       
      my $ret = 0;

     

       
81
       
 
       
      $machine->nest("waiting for new Chromium window to appear", sub {

     

       
82
       
 
       
        for (1..20) {

     

       
83
       
-
       
          my ($status, $out) = $machine->execute("${xdo "wait-for-window" ''

     

       
84
       
 
       
            search --onlyvisible --name "new tab"

     

       
85
       
 
       
            windowfocus --sync

     

       
86
       
 
       
            windowactivate --sync

     
···

       
113
       
 
       
    $machine->waitForX;

     

       
114
       
 
       


     

       
115
       
 
       
    my $url = "file://${startupHTML}";

     

       
116
       
-
       
    my $args = "--user-data-dir=/tmp/chromium-${channel}";

     

       
117
       
-
       
    $machine->execute(

     

       
118
       
-
       
      "ulimit -c unlimited; ".

     

       
119
       
-
       
      "chromium $args \"$url\" & disown"

     

       
120
       
-
       
    );

     

       
121
       
 
       
    $machine->waitForText(qr/startup done/);

     

       
122
       
-
       
    $machine->waitUntilSucceeds("${xdo "check-startup" ''

     

       
123
       
 
       
      search --sync --onlyvisible --name "startup done"

     

       
124
       
 
       
      # close first start help popup

     

       
125
       
 
       
      key -delay 1000 Escape

     
···

       
134
       
 
       
    $machine->screenshot("startup_done");

     

       
135
       
 
       


     

       
136
       
 
       
    testNewWin "check sandbox", sub {

     

       
137
       
-
       
      $machine->succeed("${xdo "type-url" ''

     

       
138
       
 
       
        search --sync --onlyvisible --name "new tab"

     

       
139
       
 
       
        windowfocus --sync

     

       
140
       
 
       
        type --delay 1000 "chrome://sandbox"

     

       
141
       
 
       
      ''}");

     

       
142
       
 
       


     

       
143
       
-
       
      $machine->succeed("${xdo "submit-url" ''

     

       
144
       
 
       
        search --sync --onlyvisible --name "new tab"

     

       
145
       
 
       
        windowfocus --sync

     

       
146
       
 
       
        key --delay 1000 Return

     
···

       
148
       
 
       


     

       
149
       
 
       
      $machine->screenshot("sandbox_info");

     

       
150
       
 
       


     

       
151
       
-
       
      $machine->succeed("${xdo "submit-url" ''

     

       
152
       
 
       
        search --sync --onlyvisible --name "sandbox status"

     

       
153
       
 
       
        windowfocus --sync

     

       
154
       
 
       
      ''}");

     

       
155
       
-
       
      $machine->succeed("${xdo "submit-url" ''

     

       
156
       
 
       
        key --delay 1000 Ctrl+a Ctrl+c

     

       
157
       
 
       
      ''}");

     

       
158
       
 
       


     

       
159
       
-
       
      my $clipboard = $machine->succeed("${pkgs.xclip}/bin/xclip -o");

     

       
160
       
 
       
      die "sandbox not working properly: $clipboard"

     

       
161
       
 
       
      unless $clipboard =~ /namespace sandbox.*yes/mi

     

       
162
       
 
       
          && $clipboard =~ /pid namespaces.*yes/mi

     

···

       
18
       
 
       


     

       
19
       
 
       
  enableOCR = true;

     

       
20
       
 
       


     

       
21
       
+
       
  machine.imports = [ ./common/user-account.nix ./common/x11.nix ];

     

       
22
       
 
       
  machine.virtualisation.memorySize = 2047;

     

       
23
       
+
       
  machine.services.xserver.displayManager.auto.user = "alice";

     

       
24
       
 
       
  machine.environment.systemPackages = [ chromiumPkg ];

     

       
25
       
 
       


     

       
26
       
 
       
  startupHTML = pkgs.writeText "chromium-startup.html" ''

     
···

       
44
       
 
       
      xdoScript = pkgs.writeText "${name}.xdo" text;

     

       
45
       
 
       
    in "${pkgs.xdotool}/bin/xdotool '${xdoScript}'";

     

       
46
       
 
       
  in ''

     

       
47
       
+
       
    # Run as user alice

     

       
48
       
+
       
    sub ru ($) {

     

       
49
       
+
       
      my $esc = $_[0] =~ s/'/'\\${"'"}'/gr;

     

       
50
       
+
       
      return "su - alice -c '$esc'";

     

       
51
       
+
       
    }

     

       
52
       
+
       


     

       
53
       
 
       
    sub createNewWin {

     

       
54
       
 
       
      $machine->nest("creating a new Chromium window", sub {

     

       
55
       
+
       
        $machine->execute(ru "${xdo "new-window" ''

     

       
56
       
 
       
          search --onlyvisible --name "startup done"

     

       
57
       
 
       
          windowfocus --sync

     

       
58
       
 
       
          windowactivate --sync

     

       
59
       
 
       
        ''}");

     

       
60
       
+
       
        $machine->execute(ru "${xdo "new-window" ''

     

       
61
       
 
       
          key Ctrl+n

     

       
62
       
 
       
        ''}");

     

       
63
       
 
       
      });

     
···

       
65
       
 
       


     

       
66
       
 
       
    sub closeWin {

     

       
67
       
 
       
      Machine::retry sub {

     

       
68
       
+
       
        $machine->execute(ru "${xdo "close-window" ''

     

       
69
       
 
       
          search --onlyvisible --name "new tab"

     

       
70
       
 
       
          windowfocus --sync

     

       
71
       
 
       
          windowactivate --sync

     

       
72
       
 
       
        ''}");

     

       
73
       
+
       
        $machine->execute(ru "${xdo "close-window" ''

     

       
74
       
 
       
          key Ctrl+w

     

       
75
       
 
       
        ''}");

     

       
76
       
 
       
        for (1..20) {

     

       
77
       
+
       
          my ($status, $out) = $machine->execute(ru "${xdo "wait-for-close" ''

     

       
78
       
 
       
            search --onlyvisible --name "new tab"

     

       
79
       
 
       
          ''}");

     

       
80
       
 
       
          return 1 if $status != 0;

     
···

       
87
       
 
       
      my $ret = 0;

     

       
88
       
 
       
      $machine->nest("waiting for new Chromium window to appear", sub {

     

       
89
       
 
       
        for (1..20) {

     

       
90
       
+
       
          my ($status, $out) = $machine->execute(ru "${xdo "wait-for-window" ''

     

       
91
       
 
       
            search --onlyvisible --name "new tab"

     

       
92
       
 
       
            windowfocus --sync

     

       
93
       
 
       
            windowactivate --sync

     
···

       
120
       
 
       
    $machine->waitForX;

     

       
121
       
 
       


     

       
122
       
 
       
    my $url = "file://${startupHTML}";

     

       
123
       
+
       
    $machine->execute(ru "ulimit -c unlimited; chromium \"$url\" & disown");

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
124
       
 
       
    $machine->waitForText(qr/startup done/);

     

       
125
       
+
       
    $machine->waitUntilSucceeds(ru "${xdo "check-startup" ''

     

       
126
       
 
       
      search --sync --onlyvisible --name "startup done"

     

       
127
       
 
       
      # close first start help popup

     

       
128
       
 
       
      key -delay 1000 Escape

     
···

       
137
       
 
       
    $machine->screenshot("startup_done");

     

       
138
       
 
       


     

       
139
       
 
       
    testNewWin "check sandbox", sub {

     

       
140
       
+
       
      $machine->succeed(ru "${xdo "type-url" ''

     

       
141
       
 
       
        search --sync --onlyvisible --name "new tab"

     

       
142
       
 
       
        windowfocus --sync

     

       
143
       
 
       
        type --delay 1000 "chrome://sandbox"

     

       
144
       
 
       
      ''}");

     

       
145
       
 
       


     

       
146
       
+
       
      $machine->succeed(ru "${xdo "submit-url" ''

     

       
147
       
 
       
        search --sync --onlyvisible --name "new tab"

     

       
148
       
 
       
        windowfocus --sync

     

       
149
       
 
       
        key --delay 1000 Return

     
···

       
151
       
 
       


     

       
152
       
 
       
      $machine->screenshot("sandbox_info");

     

       
153
       
 
       


     

       
154
       
+
       
      $machine->succeed(ru "${xdo "submit-url" ''

     

       
155
       
 
       
        search --sync --onlyvisible --name "sandbox status"

     

       
156
       
 
       
        windowfocus --sync

     

       
157
       
 
       
      ''}");

     

       
158
       
+
       
      $machine->succeed(ru "${xdo "submit-url" ''

     

       
159
       
 
       
        key --delay 1000 Ctrl+a Ctrl+c

     

       
160
       
 
       
      ''}");

     

       
161
       
 
       


     

       
162
       
+
       
      my $clipboard = $machine->succeed(ru "${pkgs.xclip}/bin/xclip -o");

     

       
163
       
 
       
      die "sandbox not working properly: $clipboard"

     

       
164
       
 
       
      unless $clipboard =~ /namespace sandbox.*yes/mi

     

       
165
       
 
       
          && $clipboard =~ /pid namespaces.*yes/mi