cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

nixos/redis: add test for unix socket access

Browse source 
This adds a test to check if the unix socket is available to the `redis` group
added in #90027.
This commit is contained in:
dadada 2021-01-03 19:20:02 +01:00
parent f1a316b4fc
commit 5d0b0fcc7d
No known key found for this signature in database
GPG key ID: EEB8D1CE62C4DFEA
1 changed files with 24 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
nixos/tests/redis.nix
View file

@ -1,4 +1,8 @@
import ./make-test-python.nix ({ pkgs, ...} : {
import ./make-test-python.nix ({ pkgs, ... }:
let
redisSocket = "/run/redis/redis.sock";
in
{
name = "redis";
meta = with pkgs.stdenv.lib.maintainers; {
maintainers = [ flokli ];
@ -10,7 +14,20 @@ import ./make-test-python.nix ({ pkgs, ...} : {
{
services.redis.enable = true;
services.redis.unixSocket = "/run/redis/redis.sock";
services.redis.unixSocket = redisSocket;
# Allow access to the unix socket for the "redis" group.
services.redis.settings.unixsocketperm = "770";
users.users."member" = {
createHome = false;
description = "A member of the redis group";
extraGroups = [
"redis"
];
group = "users";
shell = "/bin/sh";
};
};
};
@ -18,7 +35,11 @@ import ./make-test-python.nix ({ pkgs, ...} : {
start_all()
machine.wait_for_unit("redis")
machine.wait_for_open_port("6379")
# The unix socket is accessible to the redis group
machine.succeed('su member -c "redis-cli ping | grep PONG"')
machine.succeed("redis-cli ping | grep PONG")
machine.succeed("redis-cli -s /run/redis/redis.sock ping | grep PONG")
machine.succeed("redis-cli -s ${redisSocket} ping | grep PONG")
'';
})