mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-16 06:45:16 +01:00
47 lines
2 KiB
Nix
47 lines
2 KiB
Nix
|
import ./make-test-python.nix ({ pkgs, ... }: {
|
||
|
name = "tracee-integration";
|
||
|
nodes = {
|
||
|
machine = { config, pkgs, ... }: {
|
||
|
# EventFilters/trace_only_events_from_new_containers requires docker
|
||
|
# podman with docker compat will suffice
|
||
|
virtualisation.podman.enable = true;
|
||
|
virtualisation.podman.dockerCompat = true;
|
||
|
|
||
|
environment.systemPackages = [
|
||
|
# build the go integration tests as a binary
|
||
|
(pkgs.tracee.overrideAttrs (oa: {
|
||
|
pname = oa.pname + "-integration";
|
||
|
patches = oa.patches or [] ++ [
|
||
|
# change the prefix from /usr/bin to /run to find nix processes
|
||
|
../../pkgs/tools/security/tracee/test-EventFilters-prefix-nix-friendly.patch
|
||
|
# skip magic_write test that currently fails
|
||
|
../../pkgs/tools/security/tracee/test-EventFilters-magic_write-skip.patch
|
||
|
];
|
||
|
buildPhase = ''
|
||
|
runHook preBuild
|
||
|
# just build the static lib we need for the go test binary
|
||
|
make $makeFlags ''${enableParallelBuilding:+-j$NIX_BUILD_CORES -l$NIX_BUILD_CORES} bpf-core ./dist/btfhub ./dist/libbpf/libbpf.a
|
||
|
# then compile the tests to be ran later
|
||
|
CGO_CFLAGS="-I$PWD/dist/libbpf" CGO_LDFLAGS="-lelf -lz $PWD/dist/libbpf/libbpf.a" go test -tags core,ebpf,integration -p 1 -c -o $GOPATH/tracee-integration ./tests/integration/...
|
||
|
runHook postBuild
|
||
|
'';
|
||
|
doCheck = false;
|
||
|
installPhase = ''
|
||
|
mkdir -p $out/bin
|
||
|
cp $GOPATH/tracee-integration $out/bin
|
||
|
'';
|
||
|
doInstallCheck = false;
|
||
|
}))
|
||
|
];
|
||
|
};
|
||
|
};
|
||
|
|
||
|
testScript = ''
|
||
|
with subtest("run integration tests"):
|
||
|
# EventFilters/trace_only_events_from_new_containers also requires a container called "alpine"
|
||
|
machine.succeed('tar cv -C ${pkgs.pkgsStatic.busybox} . | podman import - alpine --change ENTRYPOINT=sleep')
|
||
|
|
||
|
print(machine.succeed('TRC_BIN="${pkgs.tracee}" tracee-integration -test.v'))
|
||
|
'';
|
||
|
})
|