···

       
1
       
-
       
import ../make-test.nix ({ pkgs, ...} : {

     

       
2
       
 
       
  name = "wireguard-generated";

     

       
3
       
 
       
  meta = with pkgs.stdenv.lib.maintainers; {

     

       
4
       
 
       
    maintainers = [ ma27 grahamc ];

     
···

       
28
       
 
       
  };

     

       
29
       
 
       


     

       
30
       
 
       
  testScript = ''

     

       
31
       
-
       
    startAll;

     

       
32
       
 
       


     

       
33
       
-
       
    $peer1->waitForUnit("wireguard-wg0.service");

     

       
34
       
-
       
    $peer2->waitForUnit("wireguard-wg0.service");

     

       
35
       
 
       


     

       
36
       
-
       
    my ($retcode, $peer1pubkey) = $peer1->execute("wg pubkey < /etc/wireguard/private");

     

       
37
       
-
       
    $peer1pubkey =~ s/\s+$//;

     

       
38
       
-
       
    if ($retcode != 0) {

     

       
39
       
-
       
      die "Could not read public key from peer1";

     

       
40
       
-
       
    }

     

       
41
       
 
       


     

       
42
       
-
       
    my ($retcode, $peer2pubkey) = $peer2->execute("wg pubkey < /etc/wireguard/private");

     

       
43
       
-
       
    $peer2pubkey =~ s/\s+$//;

     

       
44
       
-
       
    if ($retcode != 0) {

     

       
45
       
-
       
      die "Could not read public key from peer2";

     

       
46
       
-
       
    }

     

       
47
       
 
       


     

       
48
       
-
       
    $peer1->succeed("wg set wg0 peer $peer2pubkey allowed-ips 10.10.10.2/32 endpoint 192.168.1.2:12345 persistent-keepalive 1");

     

       
49
       
-
       
    $peer1->succeed("ip route replace 10.10.10.2/32 dev wg0 table main");

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
50
       
 
       


     

       
51
       
-
       
    $peer2->succeed("wg set wg0 peer $peer1pubkey allowed-ips 10.10.10.1/32 endpoint 192.168.1.1:12345 persistent-keepalive 1");

     

       
52
       
-
       
    $peer2->succeed("ip route replace 10.10.10.1/32 dev wg0 table main");

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
53
       
 
       


     

       
54
       
-
       
    $peer1->succeed("ping -c1 10.10.10.2");

     

       
55
       
-
       
    $peer2->succeed("ping -c1 10.10.10.1");

     

       
56
       
 
       
  '';

     

       
57
       
 
       
})

     

···

       
1
       
+
       
import ../make-test-python.nix ({ pkgs, ...} : {

     

       
2
       
 
       
  name = "wireguard-generated";

     

       
3
       
 
       
  meta = with pkgs.stdenv.lib.maintainers; {

     

       
4
       
 
       
    maintainers = [ ma27 grahamc ];

     
···

       
28
       
 
       
  };

     

       
29
       
 
       


     

       
30
       
 
       
  testScript = ''

     

       
31
       
+
       
    start_all()

     

       
32
       
 
       


     

       
33
       
+
       
    peer1.wait_for_unit("wireguard-wg0.service")

     

       
34
       
+
       
    peer2.wait_for_unit("wireguard-wg0.service")

     

       
35
       
 
       


     

       
36
       
+
       
    retcode, peer1pubkey = peer1.execute("wg pubkey < /etc/wireguard/private")

     

       
37
       
+
       
    if retcode != 0:

     

       
38
       
+
       
        raise Exception("Could not read public key from peer1")

     

       
0
       
 
       

     

       
0
       
 
       

     

       
39
       
 
       


     

       
40
       
+
       
    retcode, peer2pubkey = peer2.execute("wg pubkey < /etc/wireguard/private")

     

       
41
       
+
       
    if retcode != 0:

     

       
42
       
+
       
        raise Exception("Could not read public key from peer2")

     

       
0
       
 
       

     

       
0
       
 
       

     

       
43
       
 
       


     

       
44
       
+
       
    peer1.succeed(

     

       
45
       
+
       
        "wg set wg0 peer {} allowed-ips 10.10.10.2/32 endpoint 192.168.1.2:12345 persistent-keepalive 1".format(

     

       
46
       
+
       
            peer2pubkey.strip()

     

       
47
       
+
       
        )

     

       
48
       
+
       
    )

     

       
49
       
+
       
    peer1.succeed("ip route replace 10.10.10.2/32 dev wg0 table main")

     

       
50
       
 
       


     

       
51
       
+
       
    peer2.succeed(

     

       
52
       
+
       
        "wg set wg0 peer {} allowed-ips 10.10.10.1/32 endpoint 192.168.1.1:12345 persistent-keepalive 1".format(

     

       
53
       
+
       
            peer1pubkey.strip()

     

       
54
       
+
       
        )

     

       
55
       
+
       
    )

     

       
56
       
+
       
    peer2.succeed("ip route replace 10.10.10.1/32 dev wg0 table main")

     

       
57
       
 
       


     

       
58
       
+
       
    peer1.succeed("ping -c1 10.10.10.2")

     

       
59
       
+
       
    peer2.succeed("ping -c1 10.10.10.1")

     

       
60
       
 
       
  '';

     

       
61
       
 
       
})