71 lines
1.7 KiB
Nix
71 lines
1.7 KiB
Nix
|
{ lib, ... }:
|
||
|
|
|
||
|
|
let
|
||
|
|
normaloHashedPassword = "$y$j9T$IEWqhKtWg.r.8fVkSEF56.$iKNxdMC6hOAQRp6eBtYvBk4c7BGpONXeZMqc8I/LM46";
|
||
|
|
|
||
|
|
common = {
|
||
|
|
services.userborn.enable = true;
|
||
|
|
boot.initrd.systemd.enable = true;
|
||
|
|
system.etc.overlay = {
|
||
|
|
enable = true;
|
||
|
|
mutable = true;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
in
|
||
|
|
|
||
|
|
{
|
||
|
|
|
||
|
|
name = "userborn-mutable-etc";
|
||
|
|
|
||
|
|
meta.maintainers = with lib.maintainers; [ nikstur ];
|
||
|
|
|
||
|
|
nodes.machine =
|
||
|
|
{ config, ... }:
|
||
|
|
{
|
||
|
|
imports = [ common ];
|
||
|
|
|
||
|
|
users = {
|
||
|
|
users = {
|
||
|
|
normalo = {
|
||
|
|
isNormalUser = true;
|
||
|
|
hashedPassword = normaloHashedPassword;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
specialisation.new-generation = {
|
||
|
|
inheritParentConfig = false;
|
||
|
|
configuration = {
|
||
|
|
nixpkgs = {
|
||
|
|
inherit (config.nixpkgs) hostPlatform;
|
||
|
|
};
|
||
|
|
imports = [ common ];
|
||
|
|
|
||
|
|
users.users = {
|
||
|
|
new-normalo = {
|
||
|
|
isNormalUser = true;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
testScript = ''
|
||
|
|
machine.wait_for_unit("userborn.service")
|
||
|
|
|
||
|
|
with subtest("normalo user is created"):
|
||
|
|
assert "${normaloHashedPassword}" in machine.succeed("getent shadow normalo"), "normalo user password is not correct"
|
||
|
|
|
||
|
|
|
||
|
|
machine.succeed("/run/current-system/specialisation/new-generation/bin/switch-to-configuration switch")
|
||
|
|
|
||
|
|
|
||
|
|
with subtest("normalo user is disabled"):
|
||
|
|
print(machine.succeed("getent shadow normalo"))
|
||
|
|
assert "!*" in machine.succeed("getent shadow normalo"), "normalo user is not disabled"
|
||
|
|
|
||
|
|
with subtest("new-normalo user is created after switching to new generation"):
|
||
|
|
print(machine.succeed("getent passwd new-normalo"))
|
||
|
|
'';
|
||
|
|
}
|