nixos/tests: drop latestKernel.hardened
The latest kernel does not guarantee a hardened version anymore, see ga5341beb for the motivation.
This commit is contained in:
parent
88b3c29cf1
commit
1f55c7e022
|
@ -223,7 +223,6 @@ in
|
||||||
krb5 = discoverTests (import ./krb5 {});
|
krb5 = discoverTests (import ./krb5 {});
|
||||||
ksm = handleTest ./ksm.nix {};
|
ksm = handleTest ./ksm.nix {};
|
||||||
kubernetes = handleTestOn ["x86_64-linux"] ./kubernetes {};
|
kubernetes = handleTestOn ["x86_64-linux"] ./kubernetes {};
|
||||||
latestKernel.hardened = handleTest ./hardened.nix { latestKernel = true; };
|
|
||||||
latestKernel.login = handleTest ./login.nix { latestKernel = true; };
|
latestKernel.login = handleTest ./login.nix { latestKernel = true; };
|
||||||
leaps = handleTest ./leaps.nix {};
|
leaps = handleTest ./leaps.nix {};
|
||||||
libreddit = handleTest ./libreddit.nix {};
|
libreddit = handleTest ./libreddit.nix {};
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
import ./make-test-python.nix ({ pkgs, latestKernel ? false, ... } : {
|
import ./make-test-python.nix ({ pkgs, ... } : {
|
||||||
name = "hardened";
|
name = "hardened";
|
||||||
meta = with pkgs.lib.maintainers; {
|
meta = with pkgs.lib.maintainers; {
|
||||||
maintainers = [ joachifm ];
|
maintainers = [ joachifm ];
|
||||||
|
@ -10,8 +10,6 @@ import ./make-test-python.nix ({ pkgs, latestKernel ? false, ... } : {
|
||||||
{ users.users.alice = { isNormalUser = true; extraGroups = [ "proc" ]; };
|
{ users.users.alice = { isNormalUser = true; extraGroups = [ "proc" ]; };
|
||||||
users.users.sybil = { isNormalUser = true; group = "wheel"; };
|
users.users.sybil = { isNormalUser = true; group = "wheel"; };
|
||||||
imports = [ ../modules/profiles/hardened.nix ];
|
imports = [ ../modules/profiles/hardened.nix ];
|
||||||
boot.kernelPackages =
|
|
||||||
lib.mkIf latestKernel pkgs.linuxPackages_latest_hardened;
|
|
||||||
environment.memoryAllocator.provider = "graphene-hardened";
|
environment.memoryAllocator.provider = "graphene-hardened";
|
||||||
nix.useSandbox = false;
|
nix.useSandbox = false;
|
||||||
virtualisation.emptyDiskImages = [ 4096 ];
|
virtualisation.emptyDiskImages = [ 4096 ];
|
||||||
|
|
Loading…
Reference in a new issue