nixos/tests/podman: move docker tests to separate node
This commit is contained in:
parent
7a3b60394b
commit
bbfdc6ce4d
@ -1,5 +1,3 @@
|
|||||||
# This test runs podman and checks if simple container starts
|
|
||||||
|
|
||||||
import ../make-test-python.nix (
|
import ../make-test-python.nix (
|
||||||
{ pkgs, lib, ... }: {
|
{ pkgs, lib, ... }: {
|
||||||
name = "podman";
|
name = "podman";
|
||||||
@ -8,31 +6,31 @@ import ../make-test-python.nix (
|
|||||||
};
|
};
|
||||||
|
|
||||||
nodes = {
|
nodes = {
|
||||||
podman =
|
podman = { pkgs, ... }: {
|
||||||
{ pkgs, ... }:
|
virtualisation.podman.enable = true;
|
||||||
{
|
|
||||||
virtualisation.podman.enable = true;
|
|
||||||
|
|
||||||
# To test docker socket support
|
|
||||||
virtualisation.podman.dockerSocket.enable = true;
|
|
||||||
environment.systemPackages = [
|
|
||||||
pkgs.docker-client
|
|
||||||
];
|
|
||||||
|
|
||||||
users.users.alice = {
|
|
||||||
isNormalUser = true;
|
|
||||||
home = "/home/alice";
|
|
||||||
description = "Alice Foobar";
|
|
||||||
extraGroups = [ "podman" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
users.users.mallory = {
|
|
||||||
isNormalUser = true;
|
|
||||||
home = "/home/mallory";
|
|
||||||
description = "Mallory Foobar";
|
|
||||||
};
|
|
||||||
|
|
||||||
|
users.users.alice = {
|
||||||
|
isNormalUser = true;
|
||||||
};
|
};
|
||||||
|
};
|
||||||
|
docker = { pkgs, ... }: {
|
||||||
|
virtualisation.podman.enable = true;
|
||||||
|
|
||||||
|
virtualisation.podman.dockerSocket.enable = true;
|
||||||
|
|
||||||
|
environment.systemPackages = [
|
||||||
|
pkgs.docker-client
|
||||||
|
];
|
||||||
|
|
||||||
|
users.users.alice = {
|
||||||
|
isNormalUser = true;
|
||||||
|
extraGroups = [ "podman" ];
|
||||||
|
};
|
||||||
|
|
||||||
|
users.users.mallory = {
|
||||||
|
isNormalUser = true;
|
||||||
|
};
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
testScript = ''
|
testScript = ''
|
||||||
@ -45,6 +43,7 @@ import ../make-test-python.nix (
|
|||||||
|
|
||||||
|
|
||||||
podman.wait_for_unit("sockets.target")
|
podman.wait_for_unit("sockets.target")
|
||||||
|
docker.wait_for_unit("sockets.target")
|
||||||
start_all()
|
start_all()
|
||||||
|
|
||||||
with subtest("Run container as root with runc"):
|
with subtest("Run container as root with runc"):
|
||||||
@ -120,22 +119,22 @@ import ../make-test-python.nix (
|
|||||||
assert pid == "2"
|
assert pid == "2"
|
||||||
|
|
||||||
with subtest("A podman member can use the docker cli"):
|
with subtest("A podman member can use the docker cli"):
|
||||||
podman.succeed(su_cmd("docker version"))
|
docker.succeed(su_cmd("docker version"))
|
||||||
|
|
||||||
with subtest("Run container via docker cli"):
|
with subtest("Run container via docker cli"):
|
||||||
podman.succeed("docker network create default")
|
docker.succeed("docker network create default")
|
||||||
podman.succeed("tar cv --files-from /dev/null | podman import - scratchimg")
|
docker.succeed("tar cv --files-from /dev/null | podman import - scratchimg")
|
||||||
podman.succeed(
|
docker.succeed(
|
||||||
"docker run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin localhost/scratchimg /bin/sleep 10"
|
"docker run -d --name=sleeping -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin localhost/scratchimg /bin/sleep 10"
|
||||||
)
|
)
|
||||||
podman.succeed("docker ps | grep sleeping")
|
docker.succeed("docker ps | grep sleeping")
|
||||||
podman.succeed("podman ps | grep sleeping")
|
docker.succeed("podman ps | grep sleeping")
|
||||||
podman.succeed("docker stop sleeping")
|
docker.succeed("docker stop sleeping")
|
||||||
podman.succeed("docker rm sleeping")
|
docker.succeed("docker rm sleeping")
|
||||||
podman.succeed("docker network rm default")
|
docker.succeed("docker network rm default")
|
||||||
|
|
||||||
with subtest("A podman non-member can not use the docker cli"):
|
with subtest("A podman non-member can not use the docker cli"):
|
||||||
podman.fail(su_cmd("docker version", user="mallory"))
|
docker.fail(su_cmd("docker version", user="mallory"))
|
||||||
|
|
||||||
# TODO: add docker-compose test
|
# TODO: add docker-compose test
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user