Raito BezariusandNiko Klanecek
728d2bfee7
Adds an example plugin implementing an mTLS-enabled binary cache store (https+mtls:// scheme) using client certificates for authentication. Darwin fix: don't link liblix* into plugins (host resolves symbols at runtime via dynamic_lookup). Explicitly link curl so it binds to Nix-store libcurl, not /usr/lib/libcurl. This prevents the plugin's curl_easy_setopt calls from operating on the wrong libcurl instance. Test portability: BSD sed -i wrapper, OpenSSL -sha256 for cert signing, redirect test server output to log file. Change-Id: I652b987d3ac45e31df50ff4ba1f523294438c2b6
46 lines
985 B
Bash
Executable File
46 lines
985 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Don't start the daemon
|
|
source common/vars-and-functions.sh
|
|
|
|
test -n "$TEST_ROOT"
|
|
if test -d "$TEST_ROOT"; then
|
|
chmod -R u+w "$TEST_ROOT"
|
|
# We would delete any daemon socket, so let's stop the daemon first.
|
|
killDaemon
|
|
rm -rf "$TEST_ROOT"
|
|
fi
|
|
mkdir -p "$TEST_ROOT"
|
|
|
|
mkdir "$NIX_STORE_DIR"
|
|
mkdir "$NIX_LOCALSTATE_DIR"
|
|
mkdir -p "$NIX_LOG_DIR"/drvs
|
|
mkdir "$NIX_STATE_DIR"
|
|
mkdir "$NIX_CONF_DIR"
|
|
|
|
cat > "$NIX_CONF_DIR"/nix.conf <<EOF
|
|
build-users-group =
|
|
keep-derivations = false
|
|
sandbox = false
|
|
experimental-features = nix-command
|
|
gc-reserved-space = 0
|
|
substituters =
|
|
flake-registry = $TEST_ROOT/registry.json
|
|
show-trace = true
|
|
plugin-files =
|
|
include nix.conf.extra
|
|
trusted-users = $(whoami || id -u)
|
|
EOF
|
|
|
|
cat > "$NIX_CONF_DIR"/nix.conf.extra <<EOF
|
|
fsync-metadata = false
|
|
extra-experimental-features = flakes
|
|
!include nix.conf.extra.not-there
|
|
EOF
|
|
|
|
# Initialise the database.
|
|
nix-store --init
|
|
|
|
# Did anything happen?
|
|
test -e "$NIX_STATE_DIR"/db/db.sqlite
|