Daniel Lundin
c59ea29957
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
We want verity protected partitions as well as encrypted state/data along with verified boot. This PR integrates Peter Marshall's awesome little Nixlet project as a starting point, especially the nice testing scaffolding will be super helpful! ✨ https://github.com/petm5/nixlet/
22 lines
599 B
Nix
22 lines
599 B
Nix
{ pkgs, self }: let
|
|
|
|
lib = pkgs.lib;
|
|
test-common = import ./common.nix { inherit self lib pkgs; };
|
|
|
|
image = test-common.makeImage { };
|
|
|
|
in test-common.makeImageTest {
|
|
name = "podman";
|
|
inherit image;
|
|
script = ''
|
|
start_tpm()
|
|
machine.start()
|
|
|
|
machine.wait_for_unit("multi-user.target")
|
|
machine.wait_for_unit("network-online.target")
|
|
|
|
machine.succeed("tar cv --files-from /dev/null | su admin -l -c 'podman import - scratchimg'")
|
|
|
|
machine.succeed("su admin -l -c 'podman run --rm -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg true'")
|
|
'';
|
|
}
|