gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/tests/lasuite-drive: init

Browse Source
This commit is contained in:
soyouzpanda
2026-05-22 23:23:44 +02:00
parent 36114916a3
commit 63fd999ec4
3 changed files with 248 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/tests/all-tests.nix
+1
View File
@@ -868,6 +868,7 @@ in
languagetool = runTest ./languagetool.nix;
lanraragi = runTest ./lanraragi.nix;
lasuite-docs = runTest ./web-apps/lasuite-docs.nix;
lasuite-drive = runTest ./web-apps/lasuite-drive.nix;
lasuite-meet = runTest ./web-apps/lasuite-meet.nix;
latestKernel.login = runTest {
imports = [ ./login.nix ];
nixos/tests/web-apps/lasuite-drive.nix
+243
View File
@@ -0,0 +1,243 @@
{ lib, ... }:
let
domain = "drive.local";
oidcAddr = "127.0.0.1:8080";
s3Addr = "127.0.0.1:9000";
garageAccessKey = "GKaaaaaaaaaaaaaaaaaaaaaaaa";
garageSecretKey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";
in
{
name = "lasuite-drive";
meta.maintainers = with lib.maintainers; [
soyouzpanda
];
containers.machine =
{ pkgs, ... }:
{
networking.hosts."127.0.0.1" = [ domain ];
environment.systemPackages = with pkgs; [
awscli2
jq
];
services.lasuite-drive = {
enable = true;
enableNginx = true;
redis.createLocally = true;
postgresql.createLocally = true;
inherit domain;
s3Url = "http://${s3Addr}/lasuite-drive/";
settings = {
DJANGO_SECRET_KEY_FILE = pkgs.writeText "django-secret-file" ''
8540db59c03943d48c3ed1a0f96ce3b560e0f45274f120f7ee4dace3cc366a6b
'';
OIDC_OP_JWKS_ENDPOINT = "http://${oidcAddr}/dex/keys";
OIDC_OP_AUTHORIZATION_ENDPOINT = "http://${oidcAddr}/dex/auth/mock";
OIDC_OP_TOKEN_ENDPOINT = "http://${oidcAddr}/dex/token";
OIDC_OP_USER_ENDPOINT = "http://${oidcAddr}/dex/userinfo";
OIDC_RP_CLIENT_ID = "lasuite-drive";
OIDC_RP_SIGN_ALGO = "RS256";
OIDC_RP_SCOPES = "openid email";
OIDC_RP_CLIENT_SECRET = "lasuitedriveclientsecret";
LOGIN_REDIRECT_URL = "http://${domain}";
LOGIN_REDIRECT_URL_FAILURE = "http://${domain}";
LOGOUT_REDIRECT_URL = "http://${domain}";
AWS_S3_ENDPOINT_URL = "http://${s3Addr}";
AWS_S3_ACCESS_KEY_ID = garageAccessKey;
AWS_S3_SECRET_ACCESS_KEY = garageSecretKey;
AWS_STORAGE_BUCKET_NAME = "lasuite-drive";
AWS_S3_REGION_NAME = "garage";
MEDIA_BASE_URL = "http://${domain}";
# Disable HTTPS feature in tests because we're running on a HTTP connection
DJANGO_SECURE_PROXY_SSL_HEADER = "";
DJANGO_SECURE_SSL_REDIRECT = false;
DJANGO_CSRF_COOKIE_SECURE = false;
DJANGO_SESSION_COOKIE_SECURE = false;
DJANGO_CSRF_TRUSTED_ORIGINS = "http://*";
};
};
services.dex = {
enable = true;
settings = {
issuer = "http://${oidcAddr}/dex";
storage = {
type = "postgres";
config.host = "/var/run/postgresql";
};
web.http = "127.0.0.1:8080";
oauth2.skipApprovalScreen = true;
staticClients = [
{
id = "lasuite-drive";
name = "Drive";
redirectURIs = [ "http://${domain}/api/v1.0/callback/" ];
secretFile = "/etc/dex/lasuite-drive";
}
];
connectors = [
{
type = "mockPassword";
id = "mock";
name = "Example";
config = {
username = "admin";
password = "password";
};
}
];
};
};
services.garage = {
enable = true;
package = pkgs.garage_2;
settings = {
rpc_bind_addr = "127.0.0.1:3901";
rpc_public_addr = "127.0.0.1:3901";
rpc_secret = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";
replication_factor = 1;
s3_api = {
s3_region = "garage";
api_bind_addr = s3Addr;
};
};
};
environment.etc."dex/lasuite-drive" = {
mode = "0400";
user = "dex";
text = "lasuitedriveclientsecret";
};
services.postgresql = {
enable = true;
ensureDatabases = [ "dex" ];
ensureUsers = [
{
name = "dex";
ensureDBOwnership = true;
}
];
};
};
testScript = ''
import json
with subtest("Wait for units to start"):
machine.wait_for_unit("dex.service")
machine.wait_for_unit("garage.service")
machine.wait_for_unit("lasuite-drive.service")
machine.wait_for_unit("lasuite-drive-celery.service")
machine.wait_for_unit("lasuite-drive-beat.service")
with subtest("Create S3 bucket"):
machine.wait_for_open_port(3901)
garage_node_id = machine.succeed("garage status | tail -n1 | awk '{ print $1 }'")
machine.succeed(f"garage layout assign -c 100MB -z garage {garage_node_id}")
machine.succeed("garage layout apply --version 1")
machine.succeed("garage key import ${garageAccessKey} ${garageSecretKey} --yes")
machine.succeed("garage bucket create lasuite-drive")
machine.succeed("garage bucket allow --read --write --owner lasuite-drive --key ${garageAccessKey}")
machine.succeed("AWS_SECRET_ACCESS_KEY=${garageSecretKey} "
"AWS_ACCESS_KEY_ID=${garageAccessKey} "
"aws --endpoint http://${s3Addr} "
"s3api put-bucket-cors "
"--bucket lasuite-drive --cors-configuration "
"""'{"CORSRules":[{"AllowedHeaders":["*"],"AllowedMethods":["PUT"],"AllowedOrigins":["http://${domain}"]}]}'""")
with subtest("Wait for web servers to start"):
machine.wait_until_succeeds("curl -fs "
"'http://${domain}/api/v1.0/authenticate/'",
timeout=120)
machine.wait_until_succeeds("curl -fs "
"'${oidcAddr}/dex/auth/mock?client_id=lasuite-drive&response_type=code&redirect_uri=http://${domain}/api/v1.0/callback/&scope=openid'",
timeout=120)
with subtest("Login"):
state, nonce = machine.succeed("curl -fs -c cjar "
"'http://${domain}/api/v1.0/authenticate/' "
"-w '%{redirect_url}' "
"| sed -n 's/.*state=\\(.*\\)&nonce=\\(.*\\)/\\1 \\2/p'").strip().split(' ')
oidc_state = machine.succeed("curl -fs "
f"'${oidcAddr}/dex/auth/mock?client_id=lasuite-drive&response_type=code&redirect_uri=http://${domain}/api/v1.0/callback/&scope=openid+email&state={state}&nonce={nonce}' "
"| sed -n 's/.*state=\\(.*\\)\">.*/\\1/p'").strip()
code = machine.succeed("curl -fs "
f"'${oidcAddr}/dex/auth/mock/login?back=&state={oidc_state}' "
"-d 'login=admin&password=password' "
"-w '%{redirect_url}' "
"| sed -n 's/.*code=\\(.*\\)&.*/\\1/p'").strip()
print(f"Got approval code {code}")
machine.succeed(f"curl -fs -c cjar -b cjar 'http://${domain}/api/v1.0/callback/?code={code}&state={state}'")
with subtest("Upload a document"):
csrf_token = machine.succeed("grep csrftoken cjar | cut -f 7 | tr -d '\n'")
upload = json.loads(
machine.succeed("curl -fs -c cjar -b cjar "
"'http://${domain}/api/v1.0/items/' "
"-X POST "
f"-H 'X-CSRFToken: {csrf_token}' "
"-H 'Content-Type: application/json' "
"-H 'Referer: http://${domain}/explorer/items/my-files' "
"--data-raw '{\"type\":\"file\",\"filename\":\"text.txt\"}'"
)
)
print(f"Created file with id {upload['id']}")
machine.succeed("curl -fs "
f"'{upload['policy']}' "
"-X PUT "
"-H 'Origin: http://${domain}' "
"-H 'X-amz-acl: private' "
"-H 'Content-Type: text/plain' "
"-H 'Content-Length: 8' "
"--data-raw 'sometext'")
print("Uploaded file")
csrf_token = machine.succeed("grep csrftoken cjar | cut -f 7 | tr -d '\n'")
machine.succeed("curl -fs -c cjar -b cjar "
f"'http://${domain}/api/v1.0/items/{upload['id']}/upload-ended/' "
"-X POST "
f"-H 'X-CSRFToken: {csrf_token}' "
"-H 'Referer: http://${domain}/explorer/items/my-files'")
with subtest("Download a document"):
csrf_token = machine.succeed("grep csrftoken cjar | cut -f 7 | tr -d '\n'")
items = json.loads(
machine.succeed("curl -fs -c cjar -b cjar "
f"'http://${domain}/api/v1.0/items/' "
"-X GET "
f"-H 'X-CSRFToken: {csrf_token}' "
"-H 'Referer: http://${domain}/explorer/items/my-files'"
)
)
assert items["count"] == 1
url = items["results"][0]["url_permalink"]
data = machine.succeed("curl -fs -c cjar -b cjar -L "
f"'{url}' "
"-X GET "
"-H 'Referer: http://${domain}/explorer/items/my-files'")
assert data == "sometext"
'';
}
pkgs/by-name/la/lasuite-drive/package.nix
+4
View File
@@ -4,6 +4,7 @@
python3,
stdenv,
fetchFromGitHub,
nixosTests,
}:
let
version = "0.18.0";
@@ -141,6 +142,9 @@ python.pkgs.buildPythonApplication (finalAttrs: {
passthru = {
inherit mail frontend;
tests = {
login-upload-and-download-file = nixosTests.lasuite-drive;
};
};
__structuredAttrs = true;