summary refs log tree commit diff
path: root/nixos/tests/docker-registry.nix
blob: 2928fd8141a43ce2209e0495e12ca032720d8f64 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# This test runs docker-registry and check if it works

import ./make-test-python.nix ({ pkgs, ...} : {
  name = "docker-registry";
  meta = with pkgs.stdenv.lib.maintainers; {
    maintainers = [ globin ma27 ironpinguin ];
  };

  nodes = {
    registry = { ... }: {
      services.dockerRegistry.enable = true;
      services.dockerRegistry.enableDelete = true;
      services.dockerRegistry.port = 8080;
      services.dockerRegistry.listenAddress = "0.0.0.0";
      services.dockerRegistry.enableGarbageCollect = true;
      networking.firewall.allowedTCPPorts = [ 8080 ];
    };

    client1 = { ... }: {
      virtualisation.docker.enable = true;
      virtualisation.docker.extraOptions = "--insecure-registry registry:8080";
    };

    client2 = { ... }: {
      virtualisation.docker.enable = true;
      virtualisation.docker.extraOptions = "--insecure-registry registry:8080";
    };
  };

  testScript = ''
    client1.start()
    client1.wait_for_unit("docker.service")
    client1.succeed("tar cv --files-from /dev/null | docker import - scratch")
    client1.succeed("docker tag scratch registry:8080/scratch")

    registry.start()
    registry.wait_for_unit("docker-registry.service")
    registry.wait_for_open_port("8080")
    client1.succeed("docker push registry:8080/scratch")

    client2.start()
    client2.wait_for_unit("docker.service")
    client2.succeed("docker pull registry:8080/scratch")
    client2.succeed("docker images | grep scratch")

    client2.succeed(
        "curl -fsS -X DELETE registry:8080/v2/scratch/manifests/$(curl -fsS -I -H\"Accept: application/vnd.docker.distribution.manifest.v2+json\" registry:8080/v2/scratch/manifests/latest | grep Docker-Content-Digest | sed -e 's/Docker-Content-Digest: //' | tr -d '\\r')"
    )

    registry.systemctl("start docker-registry-garbage-collect.service")
    registry.wait_until_fails("systemctl status docker-registry-garbage-collect.service")
    registry.wait_for_unit("docker-registry.service")

    registry.fail("ls -l /var/lib/docker-registry/docker/registry/v2/blobs/sha256/*/*/data")

    client1.succeed("docker push registry:8080/scratch")
    registry.succeed(
        "ls -l /var/lib/docker-registry/docker/registry/v2/blobs/sha256/*/*/data"
    )
  '';
})