commit f33ac79c242e42f2307f1e2cb956b0a09cb01d80 · pyrox.dev/nixpkgs

+32
nixos/tests/podman/default.nix
···

       32
       32
        
                 boot.supportedFilesystems = [ "zfs" ];

     

       33
       33
        
                 networking.hostId = "00000000";

     

       34
       34
        
               };

     

       35
       35
       +
             rootful_norunc =

     

       36
       36
       +
               { pkgs, ... }:

     

       37
       37
       +
               {

     

       38
       38
       +
                 virtualisation.podman.enable = true;

     

       39
       39
       +
                 virtualisation.podman.extraRuntimes = [ ];

     

       40
       40
       +
               };

     

       35
       41
        
             rootless =

     

       36
       42
        
               { pkgs, ... }:

     

       37
       43
        
               {

     
···

       80
       86
        
       

     

       81
       87
        
       

     

       82
       88
        
             rootful.wait_for_unit("sockets.target")

     

       89
       89
       +
             rootful_norunc.wait_for_unit("sockets.target")

     

       83
       90
        
             rootless.wait_for_unit("sockets.target")

     

       84
       91
        
             dns.wait_for_unit("sockets.target")

     

       85
       92
        
             docker.wait_for_unit("sockets.target")

     
···

       111
       118
        
                 rootful.succeed("podman ps | grep sleeping")

     

       112
       119
        
                 rootful.succeed("podman stop sleeping")

     

       113
       120
        
                 rootful.succeed("podman rm sleeping")

     

       121
       121
       +
       

     

       122
       122
       +
             # now without installed runc

     

       123
       123
       +
             with subtest("Run runc-less container as root with runc"):

     

       124
       124
       +
                 rootful_norunc.succeed("tar cv --files-from /dev/null | podman import - scratchimg")

     

       125
       125
       +
                 rootful_norunc.fail(

     

       126
       126
       +
                     "podman run --runtime=runc -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"

     

       127
       127
       +
                 )

     

       128
       128
       +
       

     

       129
       129
       +
             with subtest("Run runc-less container as root with crun"):

     

       130
       130
       +
                 rootful_norunc.succeed("tar cv --files-from /dev/null | podman import - scratchimg")

     

       131
       131
       +
                 rootful_norunc.succeed(

     

       132
       132
       +
                     "podman run --runtime=crun -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"

     

       133
       133
       +
                 )

     

       134
       134
       +
                 rootful_norunc.succeed("podman ps | grep sleeping")

     

       135
       135
       +
                 rootful_norunc.succeed("podman stop sleeping")

     

       136
       136
       +
                 rootful_norunc.succeed("podman rm sleeping")

     

       137
       137
       +
       

     

       138
       138
       +
             with subtest("Run runc-less container as root with the default backend"):

     

       139
       139
       +
                 rootful_norunc.succeed("tar cv --files-from /dev/null | podman import - scratchimg")

     

       140
       140
       +
                 rootful_norunc.succeed(

     

       141
       141
       +
                     "podman run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"

     

       142
       142
       +
                 )

     

       143
       143
       +
                 rootful_norunc.succeed("podman ps | grep sleeping")

     

       144
       144
       +
                 rootful_norunc.succeed("podman stop sleeping")

     

       145
       145
       +
                 rootful_norunc.succeed("podman rm sleeping")

     

       114
       146
        
       

     

       115
       147
        
             # start systemd session for rootless

     

       116
       148
        
             rootless.succeed("loginctl enable-linger alice")