{
  system ? builtins.currentSystem,
  config ? { },
  pkgs ? import ../.. { inherit system config; },
  lib ? pkgs.lib,
}:

with import ../lib/testing-python.nix { inherit system pkgs; };

let
  inherit (lib.maintainers) elvishjerricco;

  common = {
    boot.initrd.systemd = {
      enable = true;
      network.wait-online.timeout = 10;
      network.wait-online.anyInterface = true;
      targets.network-online.requiredBy = [ "initrd.target" ];
      services.systemd-networkd-wait-online.requiredBy = [ "network-online.target" ];
      initrdBin = [
        pkgs.iproute2
        pkgs.iputils
        pkgs.gnugrep
      ];
    };
    testing.initrdBackdoor = true;
    boot.initrd.network.enable = true;
  };

  mkFlushTest =
    flush: script:
    makeTest {
      name = "systemd-initrd-network-${lib.optionalString (!flush) "no-"}flush";
      meta.maintainers = [ elvishjerricco ];

      nodes.machine = {
        imports = [ common ];

        boot.initrd.network.flushBeforeStage2 = flush;
        systemd.services.check-flush = {
          requiredBy = [ "multi-user.target" ];
          before = [
            "network-pre.target"
            "multi-user.target"
            "shutdown.target"
          ];
          conflicts = [ "shutdown.target" ];
          wants = [ "network-pre.target" ];
          unitConfig.DefaultDependencies = false;
          serviceConfig.Type = "oneshot";
          path = [
            pkgs.iproute2
            pkgs.iputils
            pkgs.gnugrep
          ];
          inherit script;
        };
      };

      testScript = ''
        machine.wait_for_unit("network-online.target")
        machine.succeed(
            "ip addr | grep 10.0.2.15",
            "ping -c1 10.0.2.2",
        )
        machine.switch_root()

        machine.wait_for_unit("multi-user.target")
      '';
    };

in
{
  basic = makeTest {
    name = "systemd-initrd-network";
    meta.maintainers = [ elvishjerricco ];

    nodes.machine = common;

    testScript = ''
      machine.wait_for_unit("network-online.target")
      machine.succeed(
          "ip addr | grep 10.0.2.15",
          "ping -c1 10.0.2.2",
      )
      machine.switch_root()

      # Make sure the systemd-network user was set correctly in initrd
      machine.wait_for_unit("multi-user.target")
      machine.succeed("[ $(stat -c '%U,%G' /run/systemd/netif/links) = systemd-network,systemd-network ]")
      machine.succeed("ip addr show >&2")
      machine.succeed("ip route show >&2")
    '';
  };

  doFlush = mkFlushTest true ''
    if ip addr | grep 10.0.2.15; then
      echo "Network configuration survived switch-root; flushBeforeStage2 failed"
      exit 1
    fi
  '';

  dontFlush = mkFlushTest false ''
    if ! (ip addr | grep 10.0.2.15); then
      echo "Network configuration didn't survive switch-root"
      exit 1
    fi
  '';
}