forked from Fediversity/Fediversity
Valentin Gagarin
9d903f3ef7
Closes #103 At last, a fully fledged data model for what Fediversity really is and does. This comes with a test that exercises a very simple but functionally complete arrangement with all ingredients fo the business logic: a dummy resource (login shell), a dummy application (`hello`, which needs a shell to live in), a dummy environment (a single NixOS VM that allows for one, the operator's, login shell), and a deployment of that environment given a dummy configuration (that enables `hello`). The next step will be to lift this purely evaluation-level test into a VM test which verifies that the resulting VM indeed has `hello` deployed to the operator's user account. Caveats: - The exact naming has a bit of room for improvement, and may have diverged from the design document - The test is not as pedantically type safe as it could be, since we simply use `types.raw` for resources such as NixOS users settings which *could* be more finely delineated Co-authored-by: Kiara Grouwstra <kiara@procolix.eu> Co-authored-by: kiara Grouwstra <kiara@procolix.eu> Reviewed-on: Fediversity/Fediversity#481 Reviewed-by: kiara Grouwstra <kiara@procolix.eu> Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> Co-committed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
87 lines
2.1 KiB
Nix
87 lines
2.1 KiB
Nix
{
|
|
system ? builtins.currentSystem,
|
|
sources ? import ./npins,
|
|
pkgs ? import sources.nixpkgs { inherit system; },
|
|
}:
|
|
let
|
|
inherit (sources)
|
|
nixpkgs
|
|
git-hooks
|
|
gitignore
|
|
;
|
|
inherit (pkgs) lib;
|
|
inherit (import sources.flake-inputs) import-flake;
|
|
inputs = (import-flake { src = ./.; }).inputs;
|
|
inherit (inputs) nixops4;
|
|
panel = import ./panel { inherit sources system; };
|
|
pre-commit-check =
|
|
(import "${git-hooks}/nix" {
|
|
inherit nixpkgs system;
|
|
gitignore-nix-src = {
|
|
lib = import gitignore { inherit lib; };
|
|
};
|
|
}).run
|
|
{
|
|
src = ./.;
|
|
hooks =
|
|
let
|
|
## Add a directory here if pre-commit hooks shouldn't apply to it.
|
|
optout = [
|
|
"npins"
|
|
];
|
|
excludes = map (dir: "^${dir}/") optout;
|
|
addExcludes = lib.mapAttrs (_: c: c // { inherit excludes; });
|
|
in
|
|
addExcludes {
|
|
nixfmt-rfc-style.enable = true;
|
|
deadnix.enable = true;
|
|
trim-trailing-whitespace.enable = true;
|
|
shellcheck.enable = true;
|
|
};
|
|
};
|
|
in
|
|
{
|
|
# shell for testing TF directly
|
|
shell = pkgs.mkShellNoCC {
|
|
inherit (pre-commit-check) shellHook;
|
|
buildInputs = pre-commit-check.enabledPackages;
|
|
packages =
|
|
let
|
|
test-loop = pkgs.writeShellApplication {
|
|
name = "test-loop";
|
|
runtimeInputs = [
|
|
pkgs.watchexec
|
|
pkgs.nix-unit
|
|
];
|
|
text = ''
|
|
watchexec -w ${builtins.toString ./.} -- nix-unit ${builtins.toString ./deployment/data-model-test.nix} "$@"
|
|
'';
|
|
};
|
|
in
|
|
[
|
|
pkgs.npins
|
|
pkgs.nil
|
|
(pkgs.callPackage "${sources.agenix}/pkgs/agenix.nix" { })
|
|
pkgs.openssh
|
|
pkgs.httpie
|
|
pkgs.jq
|
|
pkgs.nix-unit
|
|
test-loop
|
|
nixops4.packages.${system}.default
|
|
];
|
|
};
|
|
|
|
tests = {
|
|
inherit pre-commit-check;
|
|
panel = panel.tests;
|
|
};
|
|
|
|
# re-export inputs so they can be overridden granularly
|
|
# (they can't be accessed from the outside any other way)
|
|
inherit
|
|
inputs
|
|
sources
|
|
system
|
|
pkgs
|
|
;
|
|
}
|