summaryrefslogtreecommitdiffstats
path: root/nixos/tests/gvisor.nix
blob: 9bb8af2d376158f9b8257ca3275daf8f8a322e29 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# This test runs a container through gvisor and checks if simple container starts

{ pkgs, ... }:
{
  name = "gvisor";
  meta = {
    maintainers = [ ];
  };

  nodes = {
    gvisor =
      { pkgs, ... }:
      {
        virtualisation.docker = {
          enable = true;
          extraOptions = "--add-runtime runsc=${pkgs.gvisor}/bin/runsc";
        };

        networking = {
          dhcpcd.enable = false;
          defaultGateway = "192.168.1.1";
          interfaces.eth1.ipv4.addresses = pkgs.lib.mkOverride 0 [
            {
              address = "192.168.1.2";
              prefixLength = 24;
            }
          ];
        };
      };
  };

  testScript = ''
    start_all()

    gvisor.wait_for_unit("network.target")
    gvisor.wait_for_unit("sockets.target")

    # Test the Docker runtime
    gvisor.succeed("tar cv --files-from /dev/null | docker import - scratchimg")
    gvisor.succeed(
        "docker run -d --name=sleeping --runtime=runsc -v /nix/store:/nix/store -v /run/current-system/sw/bin:/bin scratchimg /bin/sleep 10"
    )
    gvisor.succeed("docker ps | grep sleeping")
    gvisor.succeed("docker stop sleeping")
  '';
}