# This test runs a container through gvisor and checks if simple container starts import ./make-test-python.nix ({ pkgs, ... }: { name = "gvisor"; meta = with pkgs.lib.maintainers; { maintainers = [ andrew-d ]; }; nodes = { gvisor = { pkgs, ... }: { virtualisation.docker = { enable = true; extraOptions = "--add-runtime runsc=${pkgs.gvisor}/bin/runsc"; }; networking = { dhcpcd.enable = false; defaultGateway = "192.168.1.1"; interfaces.eth1.ipv4.addresses = pkgs.lib.mkOverride 0 [ { address = "192.168.1.2"; prefixLength = 24; } ]; }; }; }; testScript = '' start_all() gvisor.wait_for_unit("network.target") gvisor.wait_for_unit("sockets.target") # Test the Docker runtime gvisor.succeed("tar cv --files-from /dev/null | docker import - scratchimg") gvisor.succeed( "docker run -d --name=sleeping --runtime=runsc -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10" ) gvisor.succeed("docker ps | grep sleeping") gvisor.succeed("docker stop sleeping") ''; })