;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2018 Arun Isaac <arunisaac@systemreboot.net>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu tests security-token)
  #:use-module (gnu tests)
  #:use-module (gnu system vm)
  #:use-module (gnu services)
  #:use-module (gnu services security-token)
  #:use-module (guix gexp)
  #:export (%test-pcscd))

(define %pcscd-os
  (simple-operating-system
   (service pcscd-service-type)))

(define* (run-pcscd-test)
  "Run tests of 'pcscd-service-type'."
  (define os
    (marionette-operating-system
     %pcscd-os
     #:imported-modules '((gnu services herd))
     #:requirements '(pcscd)))

  (define test
    (with-imported-modules '((gnu build marionette))
      #~(begin
          (use-modules (srfi srfi-64)
                       (gnu build marionette))
          (define marionette
            (make-marionette (list #$(virtual-machine os))))

          (test-runner-current (system-test-runner #$output))
          (test-begin "pcscd")

          (test-assert "pcscd is alive"
            (marionette-eval
             '(begin
                (use-modules (gnu services herd)
                             (srfi srfi-1))

                (live-service-running
                 (find (lambda (live)
                         (memq 'pcscd (live-service-provision live)))
                       (current-services))))
             marionette))

          (test-end))))

  (gexp->derivation "pcscd" test))

(define %test-pcscd
  (system-test
   (name "pcscd")
   (description "Test a running pcscd daemon.")
   (value (run-pcscd-test))))
f5575e375e79fdebe454ee88&amp;showmsg=1'>root</a>/<a href='/guix/log/gnu?id=7878f344c16bc3a4f5575e375e79fdebe454ee88&amp;showmsg=1'>gnu</a>/<a href='/guix/log/gnu/build?id=7878f344c16bc3a4f5575e375e79fdebe454ee88&amp;showmsg=1'>build</a>/<a href='/guix/log/gnu/build/linux-container.scm?id=7878f344c16bc3a4f5575e375e79fdebe454ee88&amp;showmsg=1'>linux-container.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/linux-container.scm?id=7878f344c16bc3a4f5575e375e79fdebe454ee88'>Collapse</a>)</th><th class='left'>Author</th></tr>
<tr class='logheader'><td><span title='2020-10-01 12:51:13 +0200'>2020-10-01</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=e74818353882f187e5971b5a3a481f17df883dbe'>linux-container: Reset jailed root permissions.</a></td><td>Jelle Licht</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* gnu/build/linux-container.scm (mount-file-systems): Add 'chmod' call.
* tests/containers.scm
("call-with-container, mnt namespace, root permissions"): New test.


</td></tr>
<tr class='logheader'><td><span title='2020-09-10 09:38:52 +0200'>2020-09-10</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=b3a83f1ece4b6c8bfcc2a9875df51142c0e39904'>build: linux-container: Fix run-container.</a></td><td>Mathieu Othacehe</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
This is a follow-up of 5316dfc0f125b658e4a2acf7f00f49501663d943. Some users of
run-container may expect that the container is jailed, even if there are no
mounts. This is the case for some Guix tests.

* gnu/build/linux-container.scm (run-container): Do not jail the container
when the requested root is "/".


</td></tr>
<tr class='logheader'><td><span title='2020-09-02 17:05:23 +0200'>2020-09-02</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=5316dfc0f125b658e4a2acf7f00f49501663d943'>linux-container: Do not jail the container unconditionally.</a></td><td>Mathieu Othacehe</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
We may want to run a container inside the MNT namespace, without jailing the
container. If RUN-CONTAINER is passed a null MOUNTS list, do not jail the
container.

* gnu/build/linux-container.scm (run-container): Do not call
MOUNT-FILE-SYSTEMS if MOUNTS list is empty.


</td></tr>
<tr class='logheader'><td><span title='2019-09-12 23:07:43 +0200'>2019-09-12</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=d236cd16a7173278ca69578d3e7ce4d1ce55e04c'>linux-container: "run-container" scripts shows the container's PID.</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* gnu/build/linux-container.scm (call-with-container): Add
 #:process-spawned-hook and honor it.
* gnu/system/linux-container.scm (container-script)[script]:
Define 'explain' and pass it as #:process-spawned-hook'.


</td></tr>
<tr class='logheader'><td><span title='2019-07-06 00:26:58 +0200'>2019-07-06</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=935e79af61f4d903e562362cdd828be807e15581'>linux-container: Mount a new /dev/pts instance in the container.</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
Fixes &lt;https://bugs.gnu.org/36463&gt;.
Reported by Steffen Rytter Postas &lt;nc@scalehost.eu&gt;.

* gnu/build/linux-container.scm (mount-file-systems): When /dev/ptmx
exists on the host, explicitly mount a new instance of devpts and make
/dev/ptmx a symlink to /dev/pts/ptmx.


</td></tr>
<tr class='logheader'><td><span title='2019-06-23 19:53:03 +0200'>2019-06-23</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=40c369b23442ace588d8c85f62f1741c17ed65c0'>linux-container: Remove dependency on (guix utils).</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
Fixes a bug whereby derivations importing (gnu build linux-container),
such as the 'bitlbee' and 'tor' services, would depend on the
user's (guix config) file, which was pulled as a dependency of (guix
utils).  As a result, those derivations would vary from user to user.

* gnu/build/linux-container.scm (call-with-temporary-directory): New
procedure.


</td></tr>
<tr class='logheader'><td><span title='2019-04-02 18:15:37 +0200'>2019-04-02</span></td><td class='logsubject'><a href='/guix/commit/gnu/build/linux-container.scm?id=af76c020bf19de5fe2e92f31d8b85cbd55c481de'>linux-container: Make the guest UID and GID a parameter.</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* gnu/build/linux-container.scm (initialize-user-namespace): Add
 #:guest-uid and #:guest-gid parameters and honor them.
(run-container): Likewise.
(call-with-container): Likewise.
* tests/containers.scm ("call-with-container, user namespace, guest UID/GID"):
New test.


</td></tr>