yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

users: fix test

Browse Source
This commit is contained in:
Michael Hoang
2025-07-13 12:17:46 +10:00
committed by Jörg Thalheim
parent a417778a53
commit da67da6f11
2 changed files with 41 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
clanServices/users/flake-module.nix
View File

@@ -4,13 +4,14 @@ let
in
{
clan.modules.users = module;
perSystem =
{ ... }:
{
clan.nixosTests.users = {
imports = [ ./tests/vm/default.nix ];
clan.modules."@clan/users" = module;
clan.modules.users = module;
};
};
}

57
clanServices/users/tests/vm/default.nix
View File

@@ -2,50 +2,71 @@
name = "service-users";
clan = {
test.useContainers = false;
directory = ./.;
inventory = {
machines.server = { };
machines.machine = { };
instances = {
root-password-test = {
module.name = "@clan/users";
users-root = {
module.name = "users";
module.input = "self";
roles.default.machines."server".settings = {
roles.default.machines.machine.settings = {
user = "root";
prompt = false;
};
};
user-password-test = {
module.name = "@clan/users";
users-testuser = {
module.name = "users";
module.input = "self";
roles.default.machines."server".settings = {
roles.default.machines.machine.settings = {
user = "testuser";
prompt = false;
};
};
users-admin = {
module.name = "users";
module.input = "self";
roles.default.machines.machine.settings = {
user = "admin";
prompt = false;
groups = [ "wheel" ];
};
};
};
};
};
nodes = {
server = {
users.users.testuser.group = "testuser";
users.groups.testuser = { };
};
machine =
{ pkgs, lib, ... }:
{
environment.systemPackages = [ pkgs.tree ]; # TODO: debug
clan.core.vars.generators.user-password-root.files.user-password.deploy = lib.mkForce true;
clan.core.vars.generators.user-password-testuser.files.user-password.deploy = lib.mkForce true;
};
};
testScript = ''
start_all()
server.wait_for_unit("multi-user.target")
machine.wait_for_unit("multi-user.target")
# Check that the testuser account exists
server.succeed("id testuser")
# Assert that the testuser exists
machine.succeed("id testuser")
# Try to log in as the user using the generated password
# TODO: fix
# password = server.succeed("cat /run/clan/vars/user-password/user-password").strip()
# server.succeed(f"echo '{password}' | su - testuser -c 'echo Login successful'")
# TODO: debug
machine.succeed("tree /run/secrets/vars")
machine.fail("su - admin -c 'echo wrong-password | su - testuser -c \"echo Login successful\"'")
output = machine.succeed("sudo --reset-timestamp --stdin -u testuser echo Login successful < /run/secrets/vars/user-password-testuser/user-password")
assert output.strip() == "Login successful", f"Failed to log in as testuser: {output=}"
machine.fail("sudo --reset-timestamp --stdin -iu root echo Login successful < /run/secrets/vars/user-password-testuser/user-password")
output = machine.succeed("sudo --reset-timestamp --stdin -u root echo Login successful < /run/secrets/vars/user-password-root/user-password")
assert output.strip() == "Login successful", f"Failed to log in as root: {output=}"
'';
}