For now check that the default client config boots. Ideas for the future: - Expand on control via netcat - Configure a circuit of nodes exercise various configs (e.g., check that a client node can access a hidden www service). Needs setting up authoritative directory servers &c.
29 lines
766 B
Nix
29 lines
766 B
Nix
import ./make-test.nix ({ lib, ... }: with lib;
|
|
|
|
rec {
|
|
name = "tor";
|
|
meta.maintainers = with maintainers; [ joachifm ];
|
|
|
|
common =
|
|
{ config, ... }:
|
|
{ boot.kernelParams = [ "audit=0" "apparmor=0" "quiet" ];
|
|
networking.firewall.enable = false;
|
|
networking.useDHCP = false;
|
|
};
|
|
|
|
nodes.client =
|
|
{ config, pkgs, ... }:
|
|
{ imports = [ common ];
|
|
environment.systemPackages = with pkgs; [ netcat ];
|
|
services.tor.enable = true;
|
|
services.tor.client.enable = true;
|
|
services.tor.controlPort = 9051;
|
|
};
|
|
|
|
testScript = ''
|
|
$client->waitForUnit("tor.service");
|
|
$client->waitForOpenPort(9051);
|
|
$client->succeed("echo GETINFO version | nc 127.0.0.1 9051") =~ /514 Authentication required./ or die;
|
|
'';
|
|
})
|