Merge pull request #31569 from gleber/add-mutable-users-test

nixos/tests: add a test for config.users.mutableUsers.

+1
nixos/release-combined.nix
···
#(all nixos.tests.lightdm)
(all nixos.tests.login)
(all nixos.tests.misc)
+
(all nixos.tests.mutableUsers)
(all nixos.tests.nat.firewall)
(all nixos.tests.nat.standalone)
(all nixos.tests.networking.scripted.loopback)
+1
nixos/release.nix
···
tests.mongodb = callTest tests/mongodb.nix {};
tests.mumble = callTest tests/mumble.nix {};
tests.munin = callTest tests/munin.nix {};
+
tests.mutableUsers = callTest tests/mutable-users.nix {};
tests.mysql = callTest tests/mysql.nix {};
tests.mysqlBackup = callTest tests/mysql-backup.nix {};
tests.mysqlReplication = callTest tests/mysql-replication.nix {};
+39
nixos/tests/mutable-users.nix
···
+
# Mutable users tests.
+
+
import ./make-test.nix ({ pkgs, ...} : {
+
name = "mutable-users";
+
meta = with pkgs.stdenv.lib.maintainers; {
+
maintainers = [ gleber ];
+
};
+
+
nodes = {
+
machine = { config, lib, pkgs, ... }: {
+
users.mutableUsers = false;
+
};
+
mutable = { config, lib, pkgs, ... }: {
+
users.mutableUsers = true;
+
};
+
};
+
+
testScript = {nodes, ...}: let
+
immutableSystem = nodes.machine.config.system.build.toplevel;
+
mutableSystem = nodes.mutable.config.system.build.toplevel;
+
in ''
+
$machine->start();
+
$machine->waitForUnit("default.target");
+
+
# Machine starts in immutable mode. Add a user and test if reactivating
+
# configuration removes the user.
+
$machine->fail("cat /etc/passwd | grep ^foobar:");
+
$machine->succeed("sudo useradd foobar");
+
$machine->succeed("cat /etc/passwd | grep ^foobar:");
+
$machine->succeed("${immutableSystem}/bin/switch-to-configuration test");
+
$machine->fail("cat /etc/passwd | grep ^foobar:");
+
+
# In immutable mode passwd is not wrapped, while in mutable mode it is
+
# wrapped.
+
$machine->succeed('which passwd | grep /run/current-system/');
+
$machine->succeed("${mutableSystem}/bin/switch-to-configuration test");
+
$machine->succeed('which passwd | grep /run/wrappers/');
+
'';
+
})