nixpkgs/nixos/tests
aszlig 9e9af4f9c0
nixos/confinement: Allow to include the full unit
From @edolstra at [1]:

  BTW we probably should take the closure of the whole unit rather than
  just the exec commands, to handle things like Environment variables.

With this commit, there is now a "fullUnit" option, which can be enabled
to include the full closure of the service unit into the chroot.

However, I did not enable this by default, because I do disagree here
and *especially* things like environment variables or environment files
shouldn't be in the closure of the chroot.

For example if you have something like:

  { pkgs, ... }:

  {
    systemd.services.foobar = {
      serviceConfig.EnvironmentFile = ${pkgs.writeText "secrets" ''
        user=admin
        password=abcdefg
      '';
    };
  }

We really do not want the *file* to end up in the chroot, but rather
just the environment variables to be exported.

Another thing is that this makes it less predictable what actually will
end up in the chroot, because we have a "globalEnvironment" option that
will get merged in as well, so users adding stuff to that option will
also make it available in confined units.

I also added a big fat warning about that in the description of the
fullUnit option.

[1]: https://github.com/NixOS/nixpkgs/pull/57519#issuecomment-472855704

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-14 20:04:33 +01:00
..
common nixos/tests/ec2: reuse ssh keys from ssh-keys.nix 2019-02-11 20:58:45 +01:00
google-oslogin nixos/tests: add google-oslogin test 2018-12-21 17:52:37 +01:00
hadoop [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
hitch [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
hocker-fetchdocker [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
hydra nixos/hydra: enhance test for multiple Nix versions 2019-02-07 16:39:35 +01:00
initrd-network-ssh [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
kerberos nixos/tests/kerberos: fix evaluation 2019-01-11 04:36:51 +00:00
krb5 [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
kubernetes nixos/kubernetes: (test) Fix race-condition in test cases. docker load might fail due to dockerd restarting 2019-02-20 21:08:57 +01:00
nextcloud tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
acme.nix nixos tests: move common configuration into separate file 2018-09-24 20:07:33 +01:00
all-tests.nix nixos/systemd-chroot: Rename chroot to confinement 2019-03-14 19:14:03 +01:00
ammonite.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
atd.nix nixos/tests/atd: wait for atd to start 2018-09-21 09:22:03 +02:00
avahi.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
bcachefs.nix nixos/tests/bcachefs: init 2018-08-31 21:19:53 -05:00
beanstalkd.nix nixos/beanstalkd: update test to use python3 instead of python2 2019-02-22 15:00:20 -05:00
beegfs.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
bees.nix nixos.tests.bees: init 2018-11-29 20:27:47 -06:00
bind.nix nixos/bind: Allow to set extra options 2018-05-30 05:07:39 +02:00
bittorrent.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
blivet.nix
boot-stage1.nix
boot.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
borgbackup.nix nixos/tests/borgbackup: test borg mount 2018-12-09 18:17:27 +01:00
buildbot.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cadvisor.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
cassandra.nix cassandra: rewrote service from scratch 2018-08-07 14:48:43 +00:00
ceph.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
certmgr.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cfssl.nix nixos/cfssl: init 2018-08-03 09:40:32 +02:00
chromium.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cjdns.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
clickhouse.nix clickhouse: fix module and package runtime 2018-12-20 13:03:41 +01:00
cloud-init.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cockroachdb.nix nixos/cockroachdb: create new service 2018-12-01 19:07:49 -06:00
codimd.nix nixos/tests: fix non-determinism for good 2018-10-10 14:57:43 +02:00
containers-bridge.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-extra_veth.nix nixos/containers: explicitly set link up on host for extraVeths 2019-01-13 11:27:39 +01:00
containers-hosts.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
containers-imperative.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-ipv4.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-ipv6.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-macvlans.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
containers-physical_interfaces.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
containers-portforward.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-reloadable.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
containers-restart_networking.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
containers-tmpfs.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
couchdb.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
deluge.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
dhparams.nix nixos/dhparams: Add a defaultBitSize option 2018-05-07 04:58:52 +02:00
dnscrypt-proxy.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
docker-edge.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
docker-preloader.nix nixos/dockerPreloader: preload docker images (#49379) 2018-11-03 01:00:53 +01:00
docker-registry.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
docker-tools-overlay.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
docker-tools.nix nixos/test/docker-tools: fix Nix image digest 2019-03-06 09:26:33 +01:00
docker.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
dovecot.nix
ec2.nix nixos/tests/ec2: reuse ssh keys from ssh-keys.nix 2019-02-11 20:58:45 +01:00
ecryptfs.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
elk.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
emacs-daemon.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
env.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
etcd-cluster.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
etcd.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
ferm.nix nixos/tests/ferm: disable dhcpcd 2018-09-21 01:17:41 +02:00
firefox.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
firewall.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
fish.nix nixos/fish: generate autocompletions from man pages 2019-02-27 12:23:48 +01:00
flannel.nix nixos/flannel: fix flannel nixos test, add test to all-tests.nix 2019-02-12 18:26:39 +01:00
flatpak.nix nixos/tests/flatpak: explicitly disable gdm to fix eval 2018-09-02 01:57:20 +02:00
fsck.nix systemd: ensure fsck Requires/After links are created in mount units 2018-08-28 17:12:49 +02:00
fwupd.nix fwupd: fix installed tests 2019-01-28 00:15:00 +01:00
gdk-pixbuf.nix nixos/tests/gdk-pixbuf: fix test on i686 (#46916) 2018-09-20 21:29:37 +02:00
gitea.nix nixos/tests/gitea: fix eval warnings 2019-02-11 03:13:03 +01:00
gitlab.nix nixos/gitlab: improved test to check download of repository archives 2019-03-12 15:04:45 +00:00
gitolite.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
gjs.nix
gnome3-gdm.nix nixos/tests/gnome3-gdm: port to wayland 2018-12-10 10:36:25 +01:00
gnome3.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
gocd-agent.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
gocd-server.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
grafana.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
graphite.nix graphite: 1.0.2 -> 1.1.3 & moved dependencies to python-modules (#44276) 2018-08-02 16:39:57 +02:00
haka.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
handbrake.nix tests: handbrake: test transcoding to MKV and MP4. 2018-11-12 08:19:58 +01:00
haproxy.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
hardened.nix nixos/tests/hardened: test loading out-of-tree-modules 2019-01-06 13:19:28 +01:00
hibernate.nix nixos/tests/hibernate: prevent non-deterministic failure (#46882) 2018-09-19 16:19:45 +02:00
home-assistant.nix home-assistant-cli: 0.5.0 -> 0.6.0 2019-02-21 14:03:35 +01:00
hound.nix nixos/tests/hound: fix non-deterministic failure (#47152) 2018-09-24 17:31:46 +02:00
i3wm.nix nixos/tests/i3wm: fix terminal title 2018-12-09 18:29:51 +01:00
iftop.nix nixos/tests/iftop: fix non-deterministic failure (#41309) 2018-06-01 22:27:51 +02:00
incron.nix nixos/incron: added nixos test to ensure expected behaviour 2018-11-10 20:54:10 -05:00
influxdb.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
initrd-network.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
installer.nix nixos/tests/installer: add cryptsetup tests for LUKS format 2 & default format 2019-03-02 13:56:52 +01:00
ipfs.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
ipv6.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
jackett.nix nixos/jackett: Add test for jackett to ensure startup 2019-01-25 07:12:41 +01:00
jenkins.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
kafka.nix kafka: Add 2.1 2018-12-05 00:06:07 +00:00
kernel-latest.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
kernel-lts.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
kexec.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
keymap.nix nixos.tests.keymap: use new name of the colemak/en-latin9 keymap 2018-11-20 04:11:39 +01:00
ldap.nix nixos/tests: test LDAP password changing through nslcd 2019-01-18 05:13:42 +01:00
leaps.nix
lidarr.nix nixos/lidarr: Add test for lidarr to ensure startup 2019-01-25 07:12:08 +01:00
lightdm.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
login.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
make-test.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
mathics.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
matrix-synapse.nix nixos/tests/matrix-synapse: generate ca and certificates 2019-02-06 16:21:07 +01:00
memcached.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
mesos.nix nixos/tests/mesos: fix test (#45758) 2018-08-29 19:38:00 +02:00
mesos_test.py
minio.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
misc.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
mongodb.nix treewide: remove wkennington as maintainer 2019-01-26 10:05:32 +00:00
morty.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
mpd.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
mpich-example.c
mumble.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
munin.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
mutable-users.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
mxisd.nix modules: add mxisd with test 2018-11-25 14:24:10 +01:00
mysql-backup.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
mysql-replication.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
mysql.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
nat.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
ndppd.nix nixos/tests/ndppd: fix eval warnings 2019-02-11 03:12:56 +01:00
neo4j.nix neo4j: add neo4j test 2019-02-01 16:01:08 +01:00
netdata.nix nixos/tests/netdata: fix non-deterministic failure 2018-08-26 13:38:58 +02:00
networking-proxy.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
networking.nix treewide: remove wkennington as maintainer 2019-01-26 10:05:32 +00:00
nexus.nix nixos/nexus: increase disk size of VM test to 8GB 2019-01-10 22:44:26 +01:00
nfs.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
nghttpx.nix
nginx-sso.nix nixos/tests: add nginx-sso basic functionality test 2019-01-29 19:54:14 +01:00
nginx.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
nix-ssh-serve.nix nixos/tests/nix-ssh-serve.nix: Use stable nix (#47584) 2018-10-01 23:01:38 +02:00
novacomd.nix nixos/tests/novacomd: prevent non-deterministic failure 2018-09-04 22:46:44 +02:00
nsd.nix nixos/nsd: Allow to configure root zone 2018-05-07 04:05:41 +02:00
openldap.nix
opensmtpd.nix dovecot, opensmtpd: add link to test in meta.tests 2018-10-30 21:31:39 +09:00
openssh.nix sshd: fix startWhenNeeded and listenAddresses combination 2019-02-25 00:51:58 +01:00
openstack-image.nix nixos/tests/ec2: reuse ssh keys from ssh-keys.nix 2019-02-11 20:58:45 +01:00
osquery.nix nixos/osquery: add test 2018-04-30 16:49:38 +02:00
osrm-backend.nix nixos/tests: add osrm-backend test 2019-01-25 00:43:34 +01:00
ostree.nix ostree: 2018.4 → 2018.6 2018-06-24 16:10:32 +02:00
pam-oath-login.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
pam-u2f.nix nixos/pam: refactor U2F, docs about u2f_keys path (#54756) 2019-01-29 08:45:26 -08:00
pantheon.nix pantheon: init a 5.0 2019-01-24 20:54:14 +00:00
partition.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
peerflix.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
pgjwt.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
pgmanage.nix
phabricator.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
php-pcre.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
plasma5.nix nixos/plasma5: disable ocr tests 2018-10-28 19:13:12 +00:00
plotinus.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
postgis.nix postgresql: cleanup postgis (#54396) 2019-01-26 21:15:43 +02:00
postgresql.nix nixos/tests/postgresql: fix regression from #55106 2019-02-04 03:56:43 +01:00
powerdns.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
predictable-interface-names.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
printing.nix misc: Remove myself from list of maintainers 2019-03-12 23:50:52 +01:00
prometheus-exporters.nix nixos/prometheus-bind-exporter: add module 2019-01-03 21:14:21 +01:00
prometheus.nix nixos/prometheus: require one alertmanager configuration parameter 2018-11-23 19:45:17 +01:00
prosody.nix nixos/tests/prosody: use sqlite database (#47185) 2018-09-23 10:46:22 +02:00
proxy.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
quagga.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
quake3.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
rabbitmq.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
radarr.nix nixos/radarr: Add test for radarr to ensure startup 2019-01-25 07:11:28 +01:00
radicale.nix Revert "nixos: rename system.{stateVersion,defaultChannel} -> system.nixos.\1" 2018-07-28 00:12:55 +03:00
redmine.nix redmine: 3.4.8 -> 4.0.1 (#55234) 2019-02-05 11:51:33 +00:00
riak.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
roundcube.nix nixos/roundcube: add package option 2019-02-08 13:35:09 +00:00
rspamd.nix nixos/tests/rspamd: fix eval warnings 2019-02-11 02:59:55 +01:00
rss2email.nix rss2email module: init 2018-11-15 23:44:16 +09:00
rsyslogd.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
run-in-machine.nix nixos/tests: Fix wrong arch in runInMachine test 2018-12-07 05:56:53 +01:00
rxe.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
samba.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
sddm.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
simple.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
slim.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
slurm.nix tests/slurm: wait for open DBD port 2018-12-09 13:36:53 +01:00
smokeping.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
snapper.nix
solr.nix solr: 4.10.3 -> 7.5.0, refactor service to reflect major changes in version bump, NixOS test included 2018-11-03 13:14:13 -04:00
sonarr.nix nixos/sonarr: Add test for sonarr to ensure startup 2019-01-25 07:10:40 +01:00
ssh-keys.nix
strongswan-swanctl.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
subversion.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
sudo.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
switch-test.nix nixos/tests/switch-test: Ensures the test fails on failure (#55744) 2019-02-14 22:55:16 +01:00
syncthing-relay.nix syncthing-relay module: init 2018-11-19 01:09:54 +01:00
systemd-confinement.nix nixos/confinement: Allow to include the full unit 2019-03-14 20:04:33 +01:00
systemd.nix nixos/systemd: Add a regression test for #50273 2018-12-12 15:35:39 +01:00
taskserver.nix nixos/tests/taskserver: fix typos (#43284) 2018-07-11 10:20:12 +02:00
telegraf.nix nixos/telegraf: add test 2019-01-21 11:37:20 +00:00
testdb.sql
timezone.nix
tomcat.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
tor.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
trac.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
transmission.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
udisks2.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
upnp.nix tests: upnp: init test for upnp using miniupnpd / miniupnpc 2018-09-15 23:10:25 +02:00
vault.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
virtualbox.nix treewide: remove wkennington as maintainer 2019-01-26 10:05:32 +00:00
wordpress.nix nixos/tests/wordpress: fix test 2018-08-24 15:48:39 +02:00
xautolock.nix
xdg-desktop-portal.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
xfce.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
xmonad.nix nixos/tests/xmonad: fix terminal title 2018-12-12 21:30:47 +01:00
xrdp.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
xss-lock.nix nixos/xss-lock: specify a default locker 2019-01-05 16:42:30 +01:00
yabar.nix nixos/yabar: fix module & test (#46954) 2018-09-20 12:47:46 +02:00
zfs.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
zookeeper.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00