15f7fa59be
Adds a new boolean structured attribute
`outputChecks.<output>.unsafeDiscardReferences` which disables scanning
an output for runtime references.
__structuredAttrs = true;
outputChecks.out.unsafeDiscardReferences = true;
This is useful when creating filesystem images containing their own embedded Nix
store: they are self-contained blobs of data with no runtime dependencies.
Setting this attribute requires the experimental feature
`discard-references` to be enabled.
51 lines
1.5 KiB
Bash
51 lines
1.5 KiB
Bash
source common.sh
|
|
|
|
clearStore
|
|
|
|
RESULT=$TEST_ROOT/result
|
|
|
|
dep=$(nix-build -o $RESULT check-refs.nix -A dep)
|
|
|
|
# test1 references dep, not itself.
|
|
test1=$(nix-build -o $RESULT check-refs.nix -A test1)
|
|
(! nix-store -q --references $test1 | grep -q $test1)
|
|
nix-store -q --references $test1 | grep -q $dep
|
|
|
|
# test2 references src, not itself nor dep.
|
|
test2=$(nix-build -o $RESULT check-refs.nix -A test2)
|
|
(! nix-store -q --references $test2 | grep -q $test2)
|
|
(! nix-store -q --references $test2 | grep -q $dep)
|
|
nix-store -q --references $test2 | grep -q aux-ref
|
|
|
|
# test3 should fail (unallowed ref).
|
|
(! nix-build -o $RESULT check-refs.nix -A test3)
|
|
|
|
# test4 should succeed.
|
|
nix-build -o $RESULT check-refs.nix -A test4
|
|
|
|
# test5 should succeed.
|
|
nix-build -o $RESULT check-refs.nix -A test5
|
|
|
|
# test6 should fail (unallowed self-ref).
|
|
(! nix-build -o $RESULT check-refs.nix -A test6)
|
|
|
|
# test7 should succeed (allowed self-ref).
|
|
nix-build -o $RESULT check-refs.nix -A test7
|
|
|
|
# test8 should fail (toFile depending on derivation output).
|
|
(! nix-build -o $RESULT check-refs.nix -A test8)
|
|
|
|
# test9 should fail (disallowed reference).
|
|
(! nix-build -o $RESULT check-refs.nix -A test9)
|
|
|
|
# test10 should succeed (no disallowed references).
|
|
nix-build -o $RESULT check-refs.nix -A test10
|
|
|
|
if isDaemonNewer 2.12pre20230103; then
|
|
enableFeatures discard-references
|
|
restartDaemon
|
|
|
|
# test11 should succeed.
|
|
test11=$(nix-build -o $RESULT check-refs.nix -A test11)
|
|
[[ -z $(nix-store -q --references "$test11") ]]
|
|
fi
|