nix/tests/functional/remote-store.sh

#!/usr/bin/env bash

source common.sh

TODO_NixOS

clearStore

# Ensure "fake ssh" remote store works just as legacy fake ssh would.
nix --store ssh-ng://localhost?remote-store=$TEST_ROOT/other-store doctor

# Ensure that store info trusted works with ssh-ng://
nix --store ssh-ng://localhost?remote-store=$TEST_ROOT/other-store store info --json | jq -e '.trusted'

startDaemon

if isDaemonNewer "2.15pre0"; then
    # Ensure that ping works trusted with new daemon
    nix store info --json | jq -e '.trusted'
    # Suppress grumpiness about multiple nixes on PATH
    (nix doctor || true) 2>&1 | grep 'You are trusted by'
else
    # And the the field is absent with the old daemon
    nix store info --json | jq -e 'has("trusted") | not'
fi

# Test import-from-derivation through the daemon.
[[ $(nix eval --impure --raw --file ./ifd.nix) = hi ]]

NIX_REMOTE_=$NIX_REMOTE $SHELL ./user-envs-test-case.sh

nix-store --gc --max-freed 1K

nix-store --dump-db > $TEST_ROOT/d1
NIX_REMOTE= nix-store --dump-db > $TEST_ROOT/d2
cmp $TEST_ROOT/d1 $TEST_ROOT/d2

killDaemon
Ensure all functional scripts are (a) executable (b) have shebang This is good for shebang, and also good for future build system simplifications 2024-05-28 16:43:04 +00:00			`#!/usr/bin/env bash`

* A test for the nix-worker. 2007-08-13 14:56:40 +00:00			`source common.sh`

tests/functional: Skip tests that don't work in NixOS environment yet 2024-06-16 10:51:46 +00:00			`TODO_NixOS`

* A test for the nix-worker. 2007-08-13 14:56:40 +00:00			`clearStore`
Test nix-store --switch-profile and more daemon actions 2014-02-26 17:28:55 +00:00
Separate auth and logic for the daemon Before, processConnection wanted to know a user name and user id, and `nix-daemon --stdio`, when it isn't proxying to an underlying daemon, would just assume "root" and 0. But `nix-daemon --stdio` (no proxying) shouldn't make guesses about who holds the other end of its standard streams. Now processConnection takes an "auth hook", so `nix-daemon` can provide the appropriate policy and daemon.cc doesn't need to know or care what it is. 2020-08-12 15:14:56 +00:00			`# Ensure "fake ssh" remote store works just as legacy fake ssh would.`
			`nix --store ssh-ng://localhost?remote-store=$TEST_ROOT/other-store doctor`

updated store ping to store info in files 2023-10-17 18:44:11 +00:00			`# Ensure that store info trusted works with ssh-ng://`
			`nix --store ssh-ng://localhost?remote-store=$TEST_ROOT/other-store store info --json \| jq -e '.trusted'`
Add `Store::isTrustedClient()` This function returns true or false depending on whether the Nix client is trusted or not. Mostly relevant when speaking to a remote store with a daemon. We include this information in `nix ping store` and `nix doctor` Co-Authored-By: John Ericson <John.Ericson@Obsidian.Systems> 2022-12-26 20:21:08 +00:00
* Refactoring. 2011-07-20 11:50:13 +00:00			`startDaemon`
Test nix-store --switch-profile and more daemon actions 2014-02-26 17:28:55 +00:00
Add `Store::isTrustedClient()` This function returns true or false depending on whether the Nix client is trusted or not. Mostly relevant when speaking to a remote store with a daemon. We include this information in `nix ping store` and `nix doctor` Co-Authored-By: John Ericson <John.Ericson@Obsidian.Systems> 2022-12-26 20:21:08 +00:00			`if isDaemonNewer "2.15pre0"; then`
			`# Ensure that ping works trusted with new daemon`
updated store ping to store info in files 2023-10-17 18:44:11 +00:00			`nix store info --json \| jq -e '.trusted'`
"but doctor, I AM the untrusted store": nix doctor had wrong trustedness This probably snuck in in a refactor using truthiness or so. The trustedness flag was having the optional fullness checked, rather than the actual contained trust level. Also adds some tests. ``` m1@6876551b-255d-4cb0-af02-8a4f17b27e2e ~ % nix store ping warning: 'nix store ping' is a deprecated alias for 'nix store info' Store URL: daemon Version: 2.20.4 Trusted: 0 m1@6876551b-255d-4cb0-af02-8a4f17b27e2e ~ % nix doctor warning: 'doctor' is a deprecated alias for 'config check' [PASS] PATH contains only one nix version. [PASS] All profiles are gcroots. [PASS] Client protocol matches store protocol. [INFO] You are trusted by store uri: daemon ``` 2024-04-08 05:43:02 +00:00			`# Suppress grumpiness about multiple nixes on PATH`
			`(nix doctor \|\| true) 2>&1 \| grep 'You are trusted by'`
Add `Store::isTrustedClient()` This function returns true or false depending on whether the Nix client is trusted or not. Mostly relevant when speaking to a remote store with a daemon. We include this information in `nix ping store` and `nix doctor` Co-Authored-By: John Ericson <John.Ericson@Obsidian.Systems> 2022-12-26 20:21:08 +00:00			`else`
			`# And the the field is absent with the old daemon`
updated store ping to store info in files 2023-10-17 18:44:11 +00:00			`nix store info --json \| jq -e 'has("trusted") \| not'`
Add `Store::isTrustedClient()` This function returns true or false depending on whether the Nix client is trusted or not. Mostly relevant when speaking to a remote store with a daemon. We include this information in `nix ping store` and `nix doctor` Co-Authored-By: John Ericson <John.Ericson@Obsidian.Systems> 2022-12-26 20:21:08 +00:00			`fi`

Fix deadlock in IFD through the daemon Fixes #4235. 2020-11-17 12:50:36 +00:00			`# Test import-from-derivation through the daemon.`
remote-store test: Break out IFD expression into a separate file 2023-12-23 22:15:09 +00:00			`[[ $(nix eval --impure --raw --file ./ifd.nix) = hi ]]`
Fix deadlock in IFD through the daemon Fixes #4235. 2020-11-17 12:50:36 +00:00
tests: simplify initialisation and wiring pararameterisation is not actually needed the way things are currently set up, and it confused me when trying to understand what the code does. all but one test sources vars-and-functions.sh, which nominally only defines variables, but in practice is always coupled with the actual initialisation. while the cleaner way of making this more legible would be to source variables and initialisation separately, this would produce a huge diff. the change requires a few small fixes to keep the tests working: - only create test home directory during initialisation that vars-and-functions.sh wrote to the file system seems not write - fix creation of the test directory due to statefulness, the test home directory was implicitly creating the test root, too. decoupling that made it apparent that this was probably not intentional, and certainly confusing. - only source vars-and-functions.sh if init.sh is not needed there is one test case that only needs a helper function but no initialisation side effects - remove some unnecessary cleanups and split parts of re-used test code there were confusing bits in how initialisation code was repurposed, which break if trying to refactor the outer layers naively... 2024-05-06 13:42:49 +00:00			`NIX_REMOTE_=$NIX_REMOTE $SHELL ./user-envs-test-case.sh`
Test nix-store --switch-profile and more daemon actions 2014-02-26 17:28:55 +00:00
Add a test ensuring compatibility with an old daemon This requires adding `nix` to its own closure which is a bit unfortunate, but as it is optional (the test will be disabled if `OUTER_NIX` is unset) it shouldn't be too much of an issue. (Ideally this should go in another derivation so that we can build Nix and run the test independently, but as the tests are running in the same derivation as the build it's a bit complicated to do so). 2020-11-10 09:43:33 +00:00			`nix-store --gc --max-freed 1K`

Test nix-store --switch-profile and more daemon actions 2014-02-26 17:28:55 +00:00			`nix-store --dump-db > $TEST_ROOT/d1`
			`NIX_REMOTE= nix-store --dump-db > $TEST_ROOT/d2`
Doh 2014-02-26 21:41:29 +00:00			`cmp $TEST_ROOT/d1 $TEST_ROOT/d2`
Test nix-store --switch-profile and more daemon actions 2014-02-26 17:28:55 +00:00
* Refactoring. 2011-07-20 11:50:13 +00:00			`killDaemon`