112 lines
		
	
	
		
			4.2 KiB
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			112 lines
		
	
	
		
			4.2 KiB
		
	
	
	
		
			Nix
		
	
	
	
	
	
# Test whether `networking.proxy' work as expected.
 | 
						|
 | 
						|
# TODO: use a real proxy node and put this test into networking.nix
 | 
						|
# TODO: test whether nix tools work as expected behind a proxy
 | 
						|
 | 
						|
let default-config = {
 | 
						|
        imports = [ ./common/user-account.nix ];
 | 
						|
 | 
						|
        services.xserver.enable = false;
 | 
						|
 | 
						|
        virtualisation.memorySize = 128;
 | 
						|
      };
 | 
						|
in import ./make-test.nix ({ pkgs, ...} : {
 | 
						|
  name = "networking-proxy";
 | 
						|
  meta = with pkgs.stdenv.lib.maintainers; {
 | 
						|
    maintainers = [  ];
 | 
						|
  };
 | 
						|
 | 
						|
  nodes = {
 | 
						|
    # no proxy
 | 
						|
    machine =
 | 
						|
      { config, pkgs, ... }:
 | 
						|
 | 
						|
      default-config;
 | 
						|
 | 
						|
    # proxy default
 | 
						|
    machine2 =
 | 
						|
      { config, pkgs, ... }:
 | 
						|
 | 
						|
      default-config // {
 | 
						|
        networking.proxy.default = "http://user:pass@host:port";
 | 
						|
      };
 | 
						|
 | 
						|
    # specific proxy options
 | 
						|
    machine3 =
 | 
						|
      { config, pkgs, ... }:
 | 
						|
 | 
						|
      default-config //
 | 
						|
      {
 | 
						|
        networking.proxy = {
 | 
						|
          # useless because overriden by the next options
 | 
						|
          default = "http://user:pass@host:port";
 | 
						|
          # advanced proxy setup
 | 
						|
          httpProxy = "123-http://user:pass@http-host:port";
 | 
						|
          httpsProxy = "456-http://user:pass@https-host:port";
 | 
						|
          rsyncProxy = "789-http://user:pass@rsync-host:port";
 | 
						|
          ftpProxy = "101112-http://user:pass@ftp-host:port";
 | 
						|
          noProxy = "131415-127.0.0.1,localhost,.localdomain";
 | 
						|
        };
 | 
						|
      };
 | 
						|
 | 
						|
    # mix default + proxy options
 | 
						|
    machine4 =
 | 
						|
      { config, pkgs, ... }:
 | 
						|
 | 
						|
      default-config // {
 | 
						|
        networking.proxy = {
 | 
						|
          # open for all *_proxy env var
 | 
						|
          default = "000-http://user:pass@default-host:port";
 | 
						|
          # except for those 2
 | 
						|
          rsyncProxy = "123-http://user:pass@http-host:port";
 | 
						|
          noProxy = "131415-127.0.0.1,localhost,.localdomain";
 | 
						|
        };
 | 
						|
      };
 | 
						|
    };
 | 
						|
 | 
						|
  testScript =
 | 
						|
    ''
 | 
						|
      startAll;
 | 
						|
 | 
						|
      # no proxy at all
 | 
						|
      print $machine->execute("env | grep -i proxy");
 | 
						|
      print $machine->execute("su - alice -c 'env | grep -i proxy'");
 | 
						|
      $machine->mustFail("env | grep -i proxy");
 | 
						|
      $machine->mustFail("su - alice -c 'env | grep -i proxy'");
 | 
						|
 | 
						|
      # Use a default proxy option
 | 
						|
      print $machine2->execute("env | grep -i proxy");
 | 
						|
      print $machine2->execute("su - alice -c 'env | grep -i proxy'");
 | 
						|
      $machine2->mustSucceed("env | grep -i proxy");
 | 
						|
      $machine2->mustSucceed("su - alice -c 'env | grep -i proxy'");
 | 
						|
 | 
						|
      # explicitly set each proxy option
 | 
						|
      print $machine3->execute("env | grep -i proxy");
 | 
						|
      print $machine3->execute("su - alice -c 'env | grep -i proxy'");
 | 
						|
      $machine3->mustSucceed("env | grep -i http_proxy | grep 123");
 | 
						|
      $machine3->mustSucceed("env | grep -i https_proxy | grep 456");
 | 
						|
      $machine3->mustSucceed("env | grep -i rsync_proxy | grep 789");
 | 
						|
      $machine3->mustSucceed("env | grep -i ftp_proxy | grep 101112");
 | 
						|
      $machine3->mustSucceed("env | grep -i no_proxy | grep 131415");
 | 
						|
      $machine3->mustSucceed("su - alice -c 'env | grep -i http_proxy | grep 123'");
 | 
						|
      $machine3->mustSucceed("su - alice -c 'env | grep -i https_proxy | grep 456'");
 | 
						|
      $machine3->mustSucceed("su - alice -c 'env | grep -i rsync_proxy | grep 789'");
 | 
						|
      $machine3->mustSucceed("su - alice -c 'env | grep -i ftp_proxy | grep 101112'");
 | 
						|
      $machine3->mustSucceed("su - alice -c 'env | grep -i no_proxy | grep 131415'");
 | 
						|
 | 
						|
      # set default proxy option + some other specifics
 | 
						|
      print $machine4->execute("env | grep -i proxy");
 | 
						|
      print $machine4->execute("su - alice -c 'env | grep -i proxy'");
 | 
						|
      $machine4->mustSucceed("env | grep -i http_proxy | grep 000");
 | 
						|
      $machine4->mustSucceed("env | grep -i https_proxy | grep 000");
 | 
						|
      $machine4->mustSucceed("env | grep -i rsync_proxy | grep 123");
 | 
						|
      $machine4->mustSucceed("env | grep -i ftp_proxy | grep 000");
 | 
						|
      $machine4->mustSucceed("env | grep -i no_proxy | grep 131415");
 | 
						|
      $machine4->mustSucceed("su - alice -c 'env | grep -i http_proxy | grep 000'");
 | 
						|
      $machine4->mustSucceed("su - alice -c 'env | grep -i https_proxy | grep 000'");
 | 
						|
      $machine4->mustSucceed("su - alice -c 'env | grep -i rsync_proxy | grep 123'");
 | 
						|
      $machine4->mustSucceed("su - alice -c 'env | grep -i ftp_proxy | grep 000'");
 | 
						|
      $machine4->mustSucceed("su - alice -c 'env | grep -i no_proxy | grep 131415'");
 | 
						|
    '';
 | 
						|
})
 |