2021-05-03 20:48:10 +00:00
|
|
|
import ./make-test-python.nix ({ pkgs, lib, ... }:
|
2020-04-24 23:36:52 +00:00
|
|
|
|
|
|
|
let
|
|
|
|
configDir = "/var/lib/foobar";
|
|
|
|
in {
|
|
|
|
name = "home-assistant";
|
2021-05-03 20:48:10 +00:00
|
|
|
meta.maintainers = lib.teams.home-assistant.members;
|
2020-04-24 23:36:52 +00:00
|
|
|
|
2020-06-15 15:56:04 +00:00
|
|
|
nodes.hass = { pkgs, ... }: {
|
|
|
|
environment.systemPackages = with pkgs; [ mosquitto ];
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
services.postgresql = {
|
|
|
|
enable = true;
|
|
|
|
ensureDatabases = [ "hass" ];
|
|
|
|
ensureUsers = [{
|
|
|
|
name = "hass";
|
|
|
|
ensurePermissions = {
|
|
|
|
"DATABASE hass" = "ALL PRIVILEGES";
|
|
|
|
};
|
|
|
|
}];
|
|
|
|
};
|
|
|
|
|
2020-06-15 15:56:04 +00:00
|
|
|
services.home-assistant = {
|
|
|
|
enable = true;
|
2022-02-20 05:27:41 +00:00
|
|
|
inherit configDir;
|
|
|
|
|
|
|
|
# tests loading components by overriding the package
|
2021-12-06 16:07:01 +00:00
|
|
|
package = (pkgs.home-assistant.override {
|
2022-02-20 05:27:41 +00:00
|
|
|
extraPackages = ps: with ps; [
|
|
|
|
colorama
|
|
|
|
];
|
2021-12-06 16:07:01 +00:00
|
|
|
extraComponents = [ "zha" ];
|
|
|
|
}).overrideAttrs (oldAttrs: {
|
|
|
|
doInstallCheck = false;
|
|
|
|
});
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
# tests loading components from the module
|
|
|
|
extraComponents = [
|
|
|
|
"wake_on_lan"
|
|
|
|
];
|
|
|
|
|
|
|
|
# test extra package passing from the module
|
|
|
|
extraPackages = python3Packages: with python3Packages; [
|
|
|
|
psycopg2
|
|
|
|
];
|
|
|
|
|
2020-06-15 15:56:04 +00:00
|
|
|
config = {
|
|
|
|
homeassistant = {
|
|
|
|
name = "Home";
|
|
|
|
time_zone = "UTC";
|
|
|
|
latitude = "0.0";
|
|
|
|
longitude = "0.0";
|
|
|
|
elevation = 0;
|
2020-04-24 23:36:52 +00:00
|
|
|
};
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
# configure the recorder component to use the postgresql db
|
|
|
|
recorder.db_url = "postgresql://@/hass";
|
|
|
|
|
|
|
|
# we can't load default_config, because the updater requires
|
|
|
|
# network access and would cause an error, so load frontend
|
|
|
|
# here explicitly.
|
|
|
|
# https://www.home-assistant.io/integrations/frontend/
|
2020-06-15 15:56:04 +00:00
|
|
|
frontend = {};
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
# set up a wake-on-lan switch to test capset capability required
|
|
|
|
# for the ping suid wrapper
|
|
|
|
# https://www.home-assistant.io/integrations/wake_on_lan/
|
|
|
|
switch = [ {
|
2022-01-26 04:04:25 +00:00
|
|
|
platform = "wake_on_lan";
|
|
|
|
mac = "00:11:22:33:44:55";
|
|
|
|
host = "127.0.0.1";
|
2022-02-20 05:27:41 +00:00
|
|
|
} ];
|
|
|
|
|
|
|
|
# test component-based capability assignment (CAP_NET_BIND_SERVICE)
|
|
|
|
# https://www.home-assistant.io/integrations/emulated_hue/
|
2021-05-03 20:48:10 +00:00
|
|
|
emulated_hue = {
|
|
|
|
host_ip = "127.0.0.1";
|
|
|
|
listen_port = 80;
|
|
|
|
};
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
# https://www.home-assistant.io/integrations/logger/
|
2020-06-15 15:56:04 +00:00
|
|
|
logger = {
|
|
|
|
default = "info";
|
|
|
|
};
|
|
|
|
};
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
# configure the sample lovelace dashboard
|
2020-06-15 15:56:04 +00:00
|
|
|
lovelaceConfig = {
|
|
|
|
title = "My Awesome Home";
|
|
|
|
views = [{
|
|
|
|
title = "Example";
|
|
|
|
cards = [{
|
|
|
|
type = "markdown";
|
|
|
|
title = "Lovelace";
|
|
|
|
content = "Welcome to your **Lovelace UI**.";
|
|
|
|
}];
|
|
|
|
}];
|
2020-04-24 23:36:52 +00:00
|
|
|
};
|
2020-06-15 15:56:04 +00:00
|
|
|
lovelaceConfigWritable = true;
|
|
|
|
};
|
2020-04-24 23:36:52 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
testScript = ''
|
2022-02-20 05:27:41 +00:00
|
|
|
import re
|
|
|
|
|
2020-04-24 23:36:52 +00:00
|
|
|
start_all()
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
# Parse the package path out of the systemd unit, as we cannot
|
|
|
|
# access the final package, that is overriden inside the module,
|
|
|
|
# by any other means.
|
|
|
|
pattern = re.compile(r"path=(?P<path>[\/a-z0-9-.]+)\/bin\/hass")
|
|
|
|
response = hass.execute("systemctl show -p ExecStart home-assistant.service")[1]
|
|
|
|
match = pattern.search(response)
|
2022-06-16 17:23:12 +00:00
|
|
|
assert match
|
2022-02-20 05:27:41 +00:00
|
|
|
package = match.group('path')
|
|
|
|
|
2020-04-24 23:36:52 +00:00
|
|
|
hass.wait_for_unit("home-assistant.service")
|
2022-02-20 05:27:41 +00:00
|
|
|
|
2020-04-24 23:36:52 +00:00
|
|
|
with subtest("Check that YAML configuration file is in place"):
|
|
|
|
hass.succeed("test -L ${configDir}/configuration.yaml")
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
with subtest("Check the lovelace config is copied because lovelaceConfigWritable = true"):
|
2020-04-24 23:36:52 +00:00
|
|
|
hass.succeed("test -f ${configDir}/ui-lovelace.yaml")
|
2022-02-20 05:27:41 +00:00
|
|
|
|
|
|
|
with subtest("Check extraComponents and extraPackages are considered from the package"):
|
|
|
|
hass.succeed(f"grep -q 'colorama' {package}/extra_packages")
|
|
|
|
hass.succeed(f"grep -q 'zha' {package}/extra_components")
|
|
|
|
|
|
|
|
with subtest("Check extraComponents and extraPackages are considered from the module"):
|
|
|
|
hass.succeed(f"grep -q 'psycopg2' {package}/extra_packages")
|
|
|
|
hass.succeed(f"grep -q 'wake_on_lan' {package}/extra_components")
|
|
|
|
|
2020-04-24 23:36:52 +00:00
|
|
|
with subtest("Check that Home Assistant's web interface and API can be reached"):
|
2022-02-20 05:27:41 +00:00
|
|
|
hass.wait_until_succeeds("journalctl -u home-assistant.service | grep -q 'Home Assistant initialized in'")
|
2020-04-24 23:36:52 +00:00
|
|
|
hass.wait_for_open_port(8123)
|
2020-05-29 06:06:01 +00:00
|
|
|
hass.succeed("curl --fail http://localhost:8123/lovelace")
|
2022-02-20 05:27:41 +00:00
|
|
|
|
2021-05-03 20:48:10 +00:00
|
|
|
with subtest("Check that capabilities are passed for emulated_hue to bind to port 80"):
|
|
|
|
hass.wait_for_open_port(80)
|
|
|
|
hass.succeed("curl --fail http://localhost:80/description.xml")
|
2022-02-20 05:27:41 +00:00
|
|
|
|
2021-12-06 16:07:01 +00:00
|
|
|
with subtest("Check extra components are considered in systemd unit hardening"):
|
|
|
|
hass.succeed("systemctl show -p DeviceAllow home-assistant.service | grep -q char-ttyUSB")
|
2022-02-20 05:27:41 +00:00
|
|
|
|
2020-04-24 23:36:52 +00:00
|
|
|
with subtest("Print log to ease debugging"):
|
|
|
|
output_log = hass.succeed("cat ${configDir}/home-assistant.log")
|
|
|
|
print("\n### home-assistant.log ###\n")
|
|
|
|
print(output_log + "\n")
|
|
|
|
|
|
|
|
with subtest("Check that no errors were logged"):
|
|
|
|
assert "ERROR" not in output_log
|
2020-06-15 15:56:04 +00:00
|
|
|
|
2021-05-03 20:48:10 +00:00
|
|
|
with subtest("Check systemd unit hardening"):
|
2022-02-20 05:27:41 +00:00
|
|
|
hass.log(hass.succeed("systemctl cat home-assistant.service"))
|
2021-05-03 20:48:10 +00:00
|
|
|
hass.log(hass.succeed("systemd-analyze security home-assistant.service"))
|
2020-04-24 23:36:52 +00:00
|
|
|
'';
|
|
|
|
})
|