nix/tests/check-refs.sh

source common.sh

clearStore

RESULT=$TEST_ROOT/result

dep=$(nix-build -o $RESULT check-refs.nix -A dep)

# test1 references dep, not itself.
test1=$(nix-build -o $RESULT check-refs.nix -A test1)
(! nix-store -q --references $test1 | grep -q $test1)
nix-store -q --references $test1 | grep -q $dep

# test2 references src, not itself nor dep.
test2=$(nix-build -o $RESULT check-refs.nix -A test2)
(! nix-store -q --references $test2 | grep -q $test2)
(! nix-store -q --references $test2 | grep -q $dep)
nix-store -q --references $test2 | grep -q aux-ref

# test3 should fail (unallowed ref).
(! nix-build -o $RESULT check-refs.nix -A test3)

# test4 should succeed.
nix-build -o $RESULT check-refs.nix -A test4

# test5 should succeed.
nix-build -o $RESULT check-refs.nix -A test5

# test6 should fail (unallowed self-ref).
(! nix-build -o $RESULT check-refs.nix -A test6)

# test7 should succeed (allowed self-ref).
nix-build -o $RESULT check-refs.nix -A test7

# test8 should fail (toFile depending on derivation output).
(! nix-build -o $RESULT check-refs.nix -A test8)

# test9 should fail (disallowed reference).
(! nix-build -o $RESULT check-refs.nix -A test9)

# test10 should succeed (no disallowed references).
nix-build -o $RESULT check-refs.nix -A test10

if isDaemonNewer 2.12pre20230103; then
    enableFeatures discard-references
    restartDaemon

    # test11 should succeed.
    test11=$(nix-build -o $RESULT check-refs.nix -A test11)
    [[ -z $(nix-store -q --references "$test11") ]]
fi
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00			`source common.sh`

Restore old (dis)allowedRequisites behaviour for self-references stdenv relies on this. So ignore self-references (but only in legacy non-structured attributes mode). 2018-10-27 13:40:09 +00:00			`clearStore`

* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00			`RESULT=$TEST_ROOT/result`

* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`dep=$(nix-build -o $RESULT check-refs.nix -A dep)`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test1 references dep, not itself.`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`test1=$(nix-build -o $RESULT check-refs.nix -A test1)`
Fix tests So all these years I was totally deluded about the meaning of "set -e". You might think that it causes statements like "false && true" or "! true" to fail, but it doesn't... 2014-08-21 19:50:19 +00:00			`(! nix-store -q --references $test1 \| grep -q $test1)`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`nix-store -q --references $test1 \| grep -q $dep`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test2 references src, not itself nor dep.`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`test2=$(nix-build -o $RESULT check-refs.nix -A test2)`
Fix tests So all these years I was totally deluded about the meaning of "set -e". You might think that it causes statements like "false && true" or "! true" to fail, but it doesn't... 2014-08-21 19:50:19 +00:00			`(! nix-store -q --references $test2 \| grep -q $test2)`
			`(! nix-store -q --references $test2 \| grep -q $dep)`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`nix-store -q --references $test2 \| grep -q aux-ref`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test3 should fail (unallowed ref).`
Fix tests So all these years I was totally deluded about the meaning of "set -e". You might think that it causes statements like "false && true" or "! true" to fail, but it doesn't... 2014-08-21 19:50:19 +00:00			`(! nix-build -o $RESULT check-refs.nix -A test3)`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test4 should succeed.`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`nix-build -o $RESULT check-refs.nix -A test4`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test5 should succeed.`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`nix-build -o $RESULT check-refs.nix -A test5`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test6 should fail (unallowed self-ref).`
Fix tests So all these years I was totally deluded about the meaning of "set -e". You might think that it causes statements like "false && true" or "! true" to fail, but it doesn't... 2014-08-21 19:50:19 +00:00			`(! nix-build -o $RESULT check-refs.nix -A test6)`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test7 should succeed (allowed self-ref).`
* Refactoring: remove unnecessary variables from the tests. 2011-10-10 21:32:34 +00:00			`nix-build -o $RESULT check-refs.nix -A test7`
* Checks for allowedReferences and some other features. * Use nix-build in a test. 2006-10-19 17:44:51 +00:00
			`# test8 should fail (toFile depending on derivation output).`
Fix tests So all these years I was totally deluded about the meaning of "set -e". You might think that it causes statements like "false && true" or "! true" to fail, but it doesn't... 2014-08-21 19:50:19 +00:00			`(! nix-build -o $RESULT check-refs.nix -A test8)`
Add disallowedReferences / disallowedRequisites For the "stdenv accidentally referring to bootstrap-tools", it seems easier to specify the path that we don't want to depend on, e.g. disallowedRequisites = [ bootstrapTools ]; 2014-08-28 16:57:13 +00:00
			`# test9 should fail (disallowed reference).`
			`(! nix-build -o $RESULT check-refs.nix -A test9)`

			`# test10 should succeed (no disallowed references).`
			`nix-build -o $RESULT check-refs.nix -A test10`
`unsafeDiscardReferences` Adds a new boolean structured attribute `outputChecks.<output>.unsafeDiscardReferences` which disables scanning an output for runtime references. __structuredAttrs = true; outputChecks.out.unsafeDiscardReferences = true; This is useful when creating filesystem images containing their own embedded Nix store: they are self-contained blobs of data with no runtime dependencies. Setting this attribute requires the experimental feature `discard-references` to be enabled. 2022-09-23 21:30:29 +00:00
			`if isDaemonNewer 2.12pre20230103; then`
			`enableFeatures discard-references`
			`restartDaemon`

			`# test11 should succeed.`
			`test11=$(nix-build -o $RESULT check-refs.nix -A test11)`
			`[[ -z $(nix-store -q --references "$test11") ]]`
			`fi`