gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/tests: add nspawn container integration test

Browse Source 
Co-authored-by: Jeremy Fleischman <jeremyfleischman@gmail.com>
This commit is contained in:
Kierán Meinhardt
2026-01-28 11:28:32 +01:00
co-authored by Jeremy Fleischman
parent 1bbcf46376
commit 930f45eb5a
2 changed files with 77 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/tests/all-tests.nix
+1
View File
@@ -1592,6 +1592,7 @@ in
teleports = runTest ./teleports.nix;
temporal = runTest ./temporal.nix;
terminal-emulators = handleTest ./terminal-emulators.nix { };
test-containers = runTest ./test-containers.nix;
test-containers-bittorrent = runTest ./test-containers-bittorrent.nix;
thanos = runTest ./thanos.nix;
thelounge = handleTest ./thelounge.nix { };
nixos/tests/test-containers.nix
+76
View File
@@ -0,0 +1,76 @@
{ pkgs, ... }:
{
name = "test-containers";
meta.maintainers = with pkgs.lib.maintainers; [ jfly ];
nodes = {
n1 = {
networking.firewall.enable = false;
virtualisation.vlans = [ 1 ];
};
n2 = {
networking.firewall.enable = false;
virtualisation.vlans = [
2
];
};
};
containers = {
c1 = {
networking.firewall.enable = false;
virtualisation.vlans = [ 1 ];
};
c2 = {
networking.firewall.enable = false;
virtualisation.vlans = [ 2 ];
};
c12 = {
networking.firewall.enable = false;
virtualisation.vlans = [
1
2
];
};
};
testScript = /* python */ ''
c1.start()
c2.start()
c12.start()
c1.succeed("echo hello > /hello.txt")
c1.copy_from_vm("/hello.txt")
c1.systemctl("start network-online.target")
c2.systemctl("start network-online.target")
c12.systemctl("start network-online.target")
c1.wait_for_unit("network-online.target")
c2.wait_for_unit("network-online.target")
c12.wait_for_unit("network-online.target")
# Confirm containers in vlan 1 can talk to each other.
c1.succeed("ping -c 1 c12")
c12.succeed("ping -c 1 c1")
# Confirm containers in vlan 2 can talk to each other.
# <<< c2.succeed("ping -c 1 c12") # <<< TODO: this doesn't work because c12's "primary ip" is for vlan 1
c12.succeed("ping -c 1 c2")
# Confirm containers in separate vlans cannot talk to each other.
c1.fail("ping -c 1 -W 1 c2")
n1.start()
n2.start()
n1.systemctl("start network-online.target")
n2.systemctl("start network-online.target")
n1.wait_for_unit("network-online.target")
n2.wait_for_unit("network-online.target")
# <<< # Confirm containers and nodes in the same vlan can talk to each other.
# <<< c1.succeed("ping -c 1 n1")
# <<< n1.succeed("ping -c 1 c1")
# <<< c2.succeed("ping -c 1 n2")
# <<< n2.succeed("ping -c 1 c2")
'';
}