summaryrefslogtreecommitdiffstats
path: root/nixos/tests/containers-portforward.nix
blob: 499f3e439021abd6eb3174db3fbf16c4be12c219 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
let
  hostIp = "192.168.0.1";
  hostPort = 10080;
  containerIp = "192.168.0.100";
  containerPort = 80;
in

{ pkgs, lib, ... }:
{
  name = "containers-portforward";
  meta = {
    maintainers = with lib.maintainers; [
      aszlig
      ianwookim
    ];
  };

  nodes.machine =
    { pkgs, ... }:
    {
      imports = [ ../modules/installer/cd-dvd/channel.nix ];
      virtualisation.writableStore = true;

      containers.webserver = {
        privateNetwork = true;
        hostAddress = hostIp;
        localAddress = containerIp;
        forwardPorts = [
          {
            protocol = "tcp";
            hostPort = hostPort;
            containerPort = containerPort;
          }
        ];
        config = {
          services.httpd.enable = true;
          services.httpd.adminAddr = "foo@example.org";
          networking.firewall.allowedTCPPorts = [ 80 ];
          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
        };
      };

      virtualisation.additionalPaths = [ pkgs.stdenv ];
    };

  testScript = ''
    container_list = machine.succeed("nixos-container list")
    assert "webserver" in container_list

    # Start the webserver container.
    machine.succeed("nixos-container start webserver")

    # wait two seconds for the container to start and the network to be up
    machine.sleep(2)

    # Since "start" returns after the container has reached
    # multi-user.target, we should now be able to access it.
    # ip = machine.succeed("nixos-container show-ip webserver").strip()
    machine.succeed("ping -n -c1 ${hostIp}")
    machine.succeed("curl --fail http://${hostIp}:${toString hostPort}/ > /dev/null")

    # Stop the container.
    machine.succeed("nixos-container stop webserver")
    machine.fail("curl --fail --connect-timeout 2 http://${hostIp}:${toString hostPort}/ > /dev/null")

    # Destroying a declarative container should fail.
    machine.fail("nixos-container destroy webserver")
  '';

}