0f7242ff87
We were bedeviled by sandboxing issues when working on the layered store. The problem ended up being that when we have nested nix builds, and the inner store is inside the build dir (e.g. store is `/build/nix-test/$name/store`, build dir is `/build`) bind mounts clobber each other and store paths cannot be found. After thoroughly cleaning up `local-derivation-goal.cc`, we might be able to make that work. But that is a lot of work. For now, we just fail earlier with a proper error message. Finally, test this: nested sandboxing without the problematic store dir should work, and with should fail with the expected error message. Co-authored-by: Dylan Green <67574902+cidkidnix@users.noreply.github.com> Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
166 lines
3.5 KiB
Makefile
166 lines
3.5 KiB
Makefile
nix_tests = \
|
|
test-infra.sh \
|
|
init.sh \
|
|
flakes/flakes.sh \
|
|
flakes/run.sh \
|
|
flakes/mercurial.sh \
|
|
flakes/circular.sh \
|
|
flakes/init.sh \
|
|
flakes/inputs.sh \
|
|
flakes/follow-paths.sh \
|
|
flakes/bundle.sh \
|
|
flakes/check.sh \
|
|
flakes/unlocked-override.sh \
|
|
flakes/absolute-paths.sh \
|
|
flakes/build-paths.sh \
|
|
flakes/flake-in-submodule.sh \
|
|
ca/gc.sh \
|
|
gc.sh \
|
|
nix-collect-garbage-d.sh \
|
|
remote-store.sh \
|
|
legacy-ssh-store.sh \
|
|
lang.sh \
|
|
lang-test-infra.sh \
|
|
experimental-features.sh \
|
|
fetchMercurial.sh \
|
|
gc-auto.sh \
|
|
user-envs.sh \
|
|
user-envs-migration.sh \
|
|
binary-cache.sh \
|
|
multiple-outputs.sh \
|
|
ca/build.sh \
|
|
ca/new-build-cmd.sh \
|
|
nix-build.sh \
|
|
gc-concurrent.sh \
|
|
repair.sh \
|
|
fixed.sh \
|
|
export-graph.sh \
|
|
timeout.sh \
|
|
fetchGitRefs.sh \
|
|
gc-runtime.sh \
|
|
tarball.sh \
|
|
fetchGit.sh \
|
|
fetchurl.sh \
|
|
fetchPath.sh \
|
|
fetchTree-file.sh \
|
|
simple.sh \
|
|
referrers.sh \
|
|
optimise-store.sh \
|
|
substitute-with-invalid-ca.sh \
|
|
ca/concurrent-builds.sh \
|
|
signing.sh \
|
|
ca/build-with-garbage-path.sh \
|
|
hash.sh \
|
|
gc-non-blocking.sh \
|
|
check.sh \
|
|
ca/substitute.sh \
|
|
nix-shell.sh \
|
|
ca/signatures.sh \
|
|
ca/nix-shell.sh \
|
|
ca/nix-copy.sh \
|
|
check-refs.sh \
|
|
build-remote-input-addressed.sh \
|
|
secure-drv-outputs.sh \
|
|
restricted.sh \
|
|
fetchGitSubmodules.sh \
|
|
flakes/search-root.sh \
|
|
ca/duplicate-realisation-in-closure.sh \
|
|
readfile-context.sh \
|
|
nix-channel.sh \
|
|
recursive.sh \
|
|
dependencies.sh \
|
|
check-reqs.sh \
|
|
build-remote-content-addressed-fixed.sh \
|
|
build-remote-content-addressed-floating.sh \
|
|
build-remote-trustless-should-pass-0.sh \
|
|
build-remote-trustless-should-pass-1.sh \
|
|
build-remote-trustless-should-pass-2.sh \
|
|
build-remote-trustless-should-pass-3.sh \
|
|
build-remote-trustless-should-fail-0.sh \
|
|
nar-access.sh \
|
|
pure-eval.sh \
|
|
eval.sh \
|
|
ca/post-hook.sh \
|
|
repl.sh \
|
|
ca/repl.sh \
|
|
ca/recursive.sh \
|
|
binary-cache-build-remote.sh \
|
|
search.sh \
|
|
logging.sh \
|
|
export.sh \
|
|
config.sh \
|
|
add.sh \
|
|
local-store.sh \
|
|
filter-source.sh \
|
|
misc.sh \
|
|
dump-db.sh \
|
|
linux-sandbox.sh \
|
|
build-dry.sh \
|
|
structured-attrs.sh \
|
|
shell.sh \
|
|
brotli.sh \
|
|
zstd.sh \
|
|
compression-levels.sh \
|
|
nix-copy-ssh.sh \
|
|
post-hook.sh \
|
|
function-trace.sh \
|
|
flakes/config.sh \
|
|
fmt.sh \
|
|
eval-store.sh \
|
|
why-depends.sh \
|
|
ca/why-depends.sh \
|
|
derivation-json.sh \
|
|
ca/derivation-json.sh \
|
|
import-derivation.sh \
|
|
ca/import-derivation.sh \
|
|
dyn-drv/text-hashed-output.sh \
|
|
dyn-drv/recursive-mod-json.sh \
|
|
nix_path.sh \
|
|
case-hack.sh \
|
|
placeholders.sh \
|
|
ssh-relay.sh \
|
|
plugins.sh \
|
|
build.sh \
|
|
build-delete.sh \
|
|
output-normalization.sh \
|
|
ca/nix-run.sh \
|
|
selfref-gc.sh ca/selfref-gc.sh \
|
|
db-migration.sh \
|
|
bash-profile.sh \
|
|
pass-as-file.sh \
|
|
nix-profile.sh \
|
|
suggestions.sh \
|
|
store-ping.sh \
|
|
fetchClosure.sh \
|
|
completions.sh \
|
|
flakes/show.sh \
|
|
impure-derivations.sh \
|
|
path-from-hash-part.sh \
|
|
test-libstoreconsumer.sh \
|
|
toString-path.sh \
|
|
read-only-store.sh \
|
|
nested-sandboxing.sh
|
|
|
|
ifeq ($(HAVE_LIBCPUID), 1)
|
|
nix_tests += compute-levels.sh
|
|
endif
|
|
|
|
install-tests += $(foreach x, $(nix_tests), $(d)/$(x))
|
|
|
|
clean-files += \
|
|
$(d)/common/vars-and-functions.sh \
|
|
$(d)/config.nix \
|
|
$(d)/ca/config.nix \
|
|
$(d)/dyn-drv/config.nix
|
|
|
|
test-deps += \
|
|
tests/common/vars-and-functions.sh \
|
|
tests/config.nix \
|
|
tests/ca/config.nix \
|
|
tests/test-libstoreconsumer/test-libstoreconsumer \
|
|
tests/dyn-drv/config.nix
|
|
|
|
ifeq ($(BUILD_SHARED_LIBS), 1)
|
|
test-deps += tests/plugins/libplugintest.$(SO_EXT)
|
|
endif
|