b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/tests/acme: test access to files outside /var/lib/acme in postRun

Browse source
This commit is contained in:
Lucas Savva 2021-05-22 18:58:24 +02:00 committed by Martin Weinelt
parent 7a10478ea7
commit eba6713e8f
No known key found for this signature in database
GPG key ID: 87C1E9888F856759
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/tests/acme.nix
View file

@ -105,9 +105,9 @@ in import ./make-test-python.nix ({ lib, ... }: {
security.acme.certs."a.example.test".keyType = "ec384"; security.acme.certs."a.example.test".keyType = "ec384";
security.acme.certs."a.example.test".postRun = '' security.acme.certs."a.example.test".postRun = ''
set -euo pipefail set -euo pipefail
touch test touch /home/test
chown root:root test chown root:root /home/test
echo testing > test echo testing > /home/test
''; '';
}; };
@ -383,7 +383,7 @@ in import ./make-test-python.nix ({ lib, ... }: {
switch_to(webserver, "cert-change") switch_to(webserver, "cert-change")
webserver.wait_for_unit("acme-finished-a.example.test.target") webserver.wait_for_unit("acme-finished-a.example.test.target")
check_connection_key_bits(client, "a.example.test", "384") check_connection_key_bits(client, "a.example.test", "384")
webserver.succeed("grep testing /var/lib/acme/a.example.test/test") webserver.succeed("grep testing /home/test")
# Clean to remove the testing file (and anything else messy we did) # Clean to remove the testing file (and anything else messy we did)
webserver.succeed("systemctl clean acme-a.example.test.service --what=state") webserver.succeed("systemctl clean acme-a.example.test.service --what=state")