d41e1bed5e
We finally test the status quo of remote build trust in a number of ways. We create a new experimental feature on `nix-daemon` to do so. PR #3921, which improves the situation with trustless remote building, will build upon these changes. This code / tests was pull out of there to make this, so everything is easier to review, and in particular we test before and after so the new behavior in that PR is readily apparent from the testsuite diff alone.
149 lines
3.1 KiB
Makefile
149 lines
3.1 KiB
Makefile
nix_tests = \
|
|
test-infra.sh \
|
|
init.sh \
|
|
flakes/flakes.sh \
|
|
flakes/run.sh \
|
|
flakes/mercurial.sh \
|
|
flakes/circular.sh \
|
|
flakes/init.sh \
|
|
flakes/inputs.sh \
|
|
flakes/follow-paths.sh \
|
|
flakes/bundle.sh \
|
|
flakes/check.sh \
|
|
flakes/unlocked-override.sh \
|
|
flakes/absolute-paths.sh \
|
|
flakes/build-paths.sh \
|
|
flakes/flake-in-submodule.sh \
|
|
ca/gc.sh \
|
|
gc.sh \
|
|
remote-store.sh \
|
|
legacy-ssh-store.sh \
|
|
lang.sh \
|
|
experimental-features.sh \
|
|
fetchMercurial.sh \
|
|
gc-auto.sh \
|
|
user-envs.sh \
|
|
user-envs-migration.sh \
|
|
binary-cache.sh \
|
|
multiple-outputs.sh \
|
|
ca/build.sh \
|
|
ca/new-build-cmd.sh \
|
|
nix-build.sh \
|
|
gc-concurrent.sh \
|
|
repair.sh \
|
|
fixed.sh \
|
|
export-graph.sh \
|
|
timeout.sh \
|
|
fetchGitRefs.sh \
|
|
gc-runtime.sh \
|
|
tarball.sh \
|
|
fetchGit.sh \
|
|
fetchurl.sh \
|
|
fetchPath.sh \
|
|
fetchTree-file.sh \
|
|
simple.sh \
|
|
referrers.sh \
|
|
optimise-store.sh \
|
|
substitute-with-invalid-ca.sh \
|
|
ca/concurrent-builds.sh \
|
|
signing.sh \
|
|
ca/build-with-garbage-path.sh \
|
|
hash.sh \
|
|
gc-non-blocking.sh \
|
|
check.sh \
|
|
ca/substitute.sh \
|
|
nix-shell.sh \
|
|
ca/signatures.sh \
|
|
ca/nix-shell.sh \
|
|
ca/nix-copy.sh \
|
|
check-refs.sh \
|
|
build-remote-input-addressed.sh \
|
|
secure-drv-outputs.sh \
|
|
restricted.sh \
|
|
fetchGitSubmodules.sh \
|
|
flakes/search-root.sh \
|
|
ca/duplicate-realisation-in-closure.sh \
|
|
readfile-context.sh \
|
|
nix-channel.sh \
|
|
recursive.sh \
|
|
dependencies.sh \
|
|
check-reqs.sh \
|
|
build-remote-content-addressed-fixed.sh \
|
|
build-remote-content-addressed-floating.sh \
|
|
build-remote-trustless-should-pass-0.sh \
|
|
build-remote-trustless-should-pass-1.sh \
|
|
build-remote-trustless-should-pass-3.sh \
|
|
build-remote-trustless-should-fail-0.sh \
|
|
nar-access.sh \
|
|
pure-eval.sh \
|
|
eval.sh \
|
|
ca/post-hook.sh \
|
|
repl.sh \
|
|
ca/repl.sh \
|
|
ca/recursive.sh \
|
|
binary-cache-build-remote.sh \
|
|
search.sh \
|
|
logging.sh \
|
|
export.sh \
|
|
config.sh \
|
|
add.sh \
|
|
local-store.sh \
|
|
filter-source.sh \
|
|
misc.sh \
|
|
dump-db.sh \
|
|
linux-sandbox.sh \
|
|
build-dry.sh \
|
|
structured-attrs.sh \
|
|
shell.sh \
|
|
brotli.sh \
|
|
zstd.sh \
|
|
compression-levels.sh \
|
|
nix-copy-ssh.sh \
|
|
post-hook.sh \
|
|
function-trace.sh \
|
|
flakes/config.sh \
|
|
fmt.sh \
|
|
eval-store.sh \
|
|
why-depends.sh \
|
|
ca/why-depends.sh \
|
|
derivation-json.sh \
|
|
ca/derivation-json.sh \
|
|
import-derivation.sh \
|
|
ca/import-derivation.sh \
|
|
nix_path.sh \
|
|
case-hack.sh \
|
|
placeholders.sh \
|
|
ssh-relay.sh \
|
|
plugins.sh \
|
|
build.sh \
|
|
build-delete.sh \
|
|
output-normalization.sh \
|
|
ca/nix-run.sh \
|
|
selfref-gc.sh ca/selfref-gc.sh \
|
|
db-migration.sh \
|
|
bash-profile.sh \
|
|
pass-as-file.sh \
|
|
nix-profile.sh \
|
|
suggestions.sh \
|
|
store-ping.sh \
|
|
fetchClosure.sh \
|
|
completions.sh \
|
|
flakes/show.sh \
|
|
impure-derivations.sh \
|
|
path-from-hash-part.sh \
|
|
toString-path.sh
|
|
|
|
ifeq ($(HAVE_LIBCPUID), 1)
|
|
nix_tests += compute-levels.sh
|
|
endif
|
|
|
|
install-tests += $(foreach x, $(nix_tests), tests/$(x))
|
|
|
|
clean-files += $(d)/common/vars-and-functions.sh $(d)/config.nix $(d)/ca/config.nix
|
|
|
|
test-deps += tests/common/vars-and-functions.sh tests/config.nix tests/ca/config.nix
|
|
|
|
ifeq ($(BUILD_SHARED_LIBS), 1)
|
|
test-deps += tests/plugins/libplugintest.$(SO_EXT)
|
|
endif
|