nixos/tests/containers-require-bind-mounts.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

{ lib, ... }:
{
  name = "containers-require-bind-mounts";
  meta.maintainers = with lib.maintainers; [ kira-bruneau ];

  nodes.machine = {
    containers.require-bind-mounts = {
      bindMounts = {
        "/srv/data" = { };
      };
      config = {
        nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
      };
    };

    virtualisation.fileSystems = {
      "/srv/data" = {
        fsType = "tmpfs";
        options = [ "noauto" ];
      };
    };
  };

  testScript = ''
    machine.wait_for_unit("default.target")

    assert "require-bind-mounts" in machine.succeed("nixos-container list")
    assert "down" in machine.succeed("nixos-container status require-bind-mounts")
    assert "inactive" in machine.fail("systemctl is-active srv-data.mount")

    with subtest("bind mount host paths must be mounted to run container"):
      machine.succeed("nixos-container start require-bind-mounts")
      assert "up" in machine.succeed("nixos-container status require-bind-mounts")
      assert "active" in machine.succeed("systemctl status srv-data.mount")

      machine.succeed("systemctl stop srv-data.mount")
      assert "down" in machine.succeed("nixos-container status require-bind-mounts")
      assert "inactive" in machine.fail("systemctl is-active srv-data.mount")
  '';
}