inventory tests: add vars support

- Add support for leading vars
- Extend test to test for vars support
- Improve update-vars.py to take test name as argument

checks/dummy-inventory-test/dummy-module/shared.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ config, ... }:
 {
   systemd.services.dummy-service = {
     enable = true;
@@ -6,8 +6,29 @@
     wantedBy = [ "multi-user.target" ];
     serviceConfig = {
       Type = "oneshot";
-      ExecStart = "${pkgs.coreutils}/bin/true";
       RemainAfterExit = true;
     };
+    script = ''
+      generated_password_path="${config.clan.core.vars.generators.dummy-generator.files.generated-password.path}"
+      if [ ! -f "$generated_password_path" ]; then
+        echo "Generated password file not found: $generated_password_path"
+        exit 1
+      fi
+      host_id_path="${config.clan.core.vars.generators.dummy-generator.files.host-id.path}"
+      if [ ! -e "$host_id_path" ]; then
+        echo "Host ID file not found: $host_id_path"
+        exit 1
+      fi
+    '';
+  };
+
+  # TODO: add and prompt and make it work in the test framework
+  clan.core.vars.generators.dummy-generator = {
+    files.host-id.secret = false;
+    files.generated-password.secret = true;
+    script = ''
+      echo $RANDOM > $out/host-id
+      echo $RANDOM > $out/generated-password
+    '';
   };
 }

checks/lib/test-inventory.nix

@@ -47,6 +47,20 @@ in
           documentation.enable = lib.mkDefault false;
           nix.settings.min-free = 0;
           system.stateVersion = config.system.nixos.release;
+          boot.initrd.systemd.enable = false;
+
+          # setup for sops
+          sops.age.keyFile = "/run/age-key.txt";
+          system.activationScripts =
+            {
+              setupSecrets.deps = [ "age-key" ];
+              age-key.text = ''
+                echo AGE-SECRET-KEY-1PL0M9CWRCG3PZ9DXRTTLMCVD57U6JDFE8K7DNVQ35F4JENZ6G3MQ0RQLRV > /run/age-key.txt
+              '';
+            }
+            // lib.optionalAttrs (lib.filterAttrs (_: v: v.neededForUsers) config.sops.secrets != { }) {
+              setupSecretsForUsers.deps = [ "age-key" ];
+            };
         }
       );