nixos/tests/krill.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

{ pkgs, lib, ... }:

{
  name = "krill";

  meta = {
    maintainers = [ lib.maintainers.stepbrobd ];
    teams = [ lib.teams.ngi ];
  };

  nodes.machine = {
    services.krill = {
      enable = true;
      settings = {
        admin_token = "krill-nixos-test";
        # VM have no internet
        bgp_riswhois_enabled = false;
        # embedded trust anchor
        testbed = {
          ta_aia = "rsync://krill.test/ta/ta.cer";
          ta_uri = "https://krill.test/ta/ta.cer";
          rrdp_base_uri = "https://krill.test/rrdp/";
          rsync_jail = "rsync://krill.test/repo/";
        };
      };
    };
  };

  testScript = ''
    start_all()

    machine.wait_for_unit("krill.service")
    machine.wait_for_open_port(3000)

    machine.wait_until_succeeds("krillc health")

    assert "${pkgs.krill.version}" in machine.succeed("krillc info")

    machine.wait_until_succeeds("krillc show --ca testbed")
  '';
}