nixpkgs-suyu/nixos/tests
Florian Klink 8817bbefdb nixos/ldap: set proper User= and Group= for nslcd service
eb90d97009 broke nslcd, as /run/nslcd was
created/chowned as root user, while nslcd wants to do parts as nslcd
user.

This commit changes the nslcd to run with the proper uid/gid from the
start (through User= and Group=), so the RuntimeDirectory has proper
permissions, too.

In some cases, secrets are baked into nslcd's config file during startup
(so we don't want to provide it from the store).

This config file is normally hard-wired to /etc/nslcd.conf, but we don't
want to use PermissionsStartOnly anymore (#56265), and activation
scripts are ugly, so redirect /etc/nslcd.conf to /run/nslcd/nslcd.conf,
which now gets provisioned inside ExecStartPre=.

This change requires the files referenced to in
users.ldap.bind.passwordFile and users.ldap.daemon.rootpwmodpwFile to be
readable by the nslcd user (in the non-nslcd case, this was already the
case for users.ldap.bind.passwordFile)

fixes #57783
2019-03-28 13:08:47 +01:00
..
common nixos docs: run the formatting tool (no content change) 2019-03-22 14:44:11 +01:00
google-oslogin nixos/tests: add google-oslogin test 2018-12-21 17:52:37 +01:00
hadoop
hitch
hocker-fetchdocker
hydra nixos/hydra: enhance test for multiple Nix versions 2019-02-07 16:39:35 +01:00
initrd-network-ssh
kerberos nixos/tests/kerberos: fix evaluation 2019-01-11 04:36:51 +00:00
krb5
kubernetes nixos/kubernetes: (test) Fix race-condition in test cases. docker load might fail due to dockerd restarting 2019-02-20 21:08:57 +01:00
nextcloud tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
acme.nix nixos tests: move common configuration into separate file 2018-09-24 20:07:33 +01:00
all-tests.nix NixOS: Run Docker containers as declarative systemd services (#55179) 2019-03-25 00:59:09 +02:00
ammonite.nix
atd.nix nixos/tests/atd: wait for atd to start 2018-09-21 09:22:03 +02:00
avahi.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
bcachefs.nix nixos/tests/bcachefs: init 2018-08-31 21:19:53 -05:00
beanstalkd.nix nixos/beanstalkd: update test to use python3 instead of python2 2019-02-22 15:00:20 -05:00
beegfs.nix
bees.nix nixos.tests.bees: init 2018-11-29 20:27:47 -06:00
bind.nix
bittorrent.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
blivet.nix
boot-stage1.nix
boot.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
borgbackup.nix nixos/tests/borgbackup: test borg mount 2018-12-09 18:17:27 +01:00
buildbot.nix buildbot: 1.8.1 -> 2.1.0 2019-03-22 18:43:15 -04:00
cadvisor.nix
cassandra.nix
ceph.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
certmgr.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cfssl.nix
chromium.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cjdns.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
clickhouse.nix clickhouse: fix module and package runtime 2018-12-20 13:03:41 +01:00
cloud-init.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
cockroachdb.nix nixos/cockroachdb: create new service 2018-12-01 19:07:49 -06:00
codimd.nix nixos/tests: fix non-determinism for good 2018-10-10 14:57:43 +02:00
colord.nix nixos/tests/colord: init 2019-03-18 08:05:42 -04:00
containers-bridge.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-extra_veth.nix nixos/containers: explicitly set link up on host for extraVeths 2019-01-13 11:27:39 +01:00
containers-hosts.nix
containers-imperative.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-ipv4.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-ipv6.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-macvlans.nix
containers-physical_interfaces.nix
containers-portforward.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
containers-reloadable.nix
containers-restart_networking.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
containers-tmpfs.nix
couchdb.nix
deluge.nix
dhparams.nix
dnscrypt-proxy.nix
docker-containers.nix NixOS: Run Docker containers as declarative systemd services (#55179) 2019-03-25 00:59:09 +02:00
docker-edge.nix
docker-preloader.nix nixos/dockerPreloader: preload docker images (#49379) 2018-11-03 01:00:53 +01:00
docker-registry.nix
docker-tools-overlay.nix
docker-tools.nix nixos/test/docker-tools: fix Nix image digest 2019-03-06 09:26:33 +01:00
docker.nix
dovecot.nix
ec2.nix nixos/tests/ec2: reuse ssh keys from ssh-keys.nix 2019-02-11 20:58:45 +01:00
ecryptfs.nix
elk.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
emacs-daemon.nix
env.nix
etcd-cluster.nix
etcd.nix
ferm.nix nixos/tests/ferm: disable dhcpcd 2018-09-21 01:17:41 +02:00
firefox.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
firewall.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
fish.nix nixos/fish: generate autocompletions from man pages 2019-02-27 12:23:48 +01:00
flannel.nix nixos/flannel: fix flannel nixos test, add test to all-tests.nix 2019-02-12 18:26:39 +01:00
flatpak.nix nixos/tests/flatpak: explicitly disable gdm to fix eval 2018-09-02 01:57:20 +02:00
fsck.nix systemd: ensure fsck Requires/After links are created in mount units 2018-08-28 17:12:49 +02:00
fwupd.nix fwupd: fix installed tests 2019-01-28 00:15:00 +01:00
gdk-pixbuf.nix nixos/tests/gdk-pixbuf: fix test on i686 (#46916) 2018-09-20 21:29:37 +02:00
gitea.nix nixos/tests/gitea: fix eval warnings 2019-02-11 03:13:03 +01:00
gitlab.nix nixos/gitlab: improved test to check download of repository archives 2019-03-12 15:04:45 +00:00
gitolite.nix
gjs.nix
gnome3-gdm.nix nixos/tests/gnome3-gdm: port to wayland 2018-12-10 10:36:25 +01:00
gnome3.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
gocd-agent.nix
gocd-server.nix
grafana.nix
graphite.nix
haka.nix
handbrake.nix tests: handbrake: test transcoding to MKV and MP4. 2018-11-12 08:19:58 +01:00
haproxy.nix
hardened.nix nixos/tests/hardened: test loading out-of-tree-modules 2019-01-06 13:19:28 +01:00
hibernate.nix nixos/tests/hibernate: prevent non-deterministic failure (#46882) 2018-09-19 16:19:45 +02:00
home-assistant.nix home-assistant: 0.89.2 -> 0.90.1 (#58017) 2019-03-24 19:45:35 +01:00
hound.nix nixos/tests/hound: fix non-deterministic failure (#47152) 2018-09-24 17:31:46 +02:00
i3wm.nix nixos/tests/i3wm: fix terminal title 2018-12-09 18:29:51 +01:00
iftop.nix
incron.nix nixos/incron: added nixos test to ensure expected behaviour 2018-11-10 20:54:10 -05:00
influxdb.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
initrd-network.nix
installer.nix nixos/tests/installer: add cryptsetup tests for LUKS format 2 & default format 2019-03-02 13:56:52 +01:00
ipfs.nix
ipv6.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
jackett.nix nixos/jackett: Add test for jackett to ensure startup 2019-01-25 07:12:41 +01:00
jenkins.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
kafka.nix kafka: Add 2.1 2018-12-05 00:06:07 +00:00
kernel-latest.nix
kernel-lts.nix
kexec.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
keymap.nix nixos.tests.keymap: use new name of the colemak/en-latin9 keymap 2018-11-20 04:11:39 +01:00
knot.nix nixos/knot: init 2019-03-14 01:28:53 +01:00
ldap.nix nixos/ldap: set proper User= and Group= for nslcd service 2019-03-28 13:08:47 +01:00
leaps.nix
lidarr.nix nixos/lidarr: Add test for lidarr to ensure startup 2019-01-25 07:12:08 +01:00
lightdm.nix
login.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
make-test.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
mathics.nix
matrix-synapse.nix nixos/tests/matrix-synapse: generate ca and certificates 2019-02-06 16:21:07 +01:00
memcached.nix
mesos.nix nixos/tests/mesos: fix test (#45758) 2018-08-29 19:38:00 +02:00
mesos_test.py
minio.nix
misc.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
mongodb.nix treewide: remove wkennington as maintainer 2019-01-26 10:05:32 +00:00
morty.nix
mpd.nix
mpich-example.c
mumble.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
munin.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
mutable-users.nix
mxisd.nix modules: add mxisd with test 2018-11-25 14:24:10 +01:00
mysql-backup.nix
mysql-replication.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
mysql.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
nat.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
ndppd.nix nixos/tests/ndppd: fix eval warnings 2019-02-11 03:12:56 +01:00
neo4j.nix neo4j: add neo4j test 2019-02-01 16:01:08 +01:00
netdata.nix nixos/tests/netdata: fix non-deterministic failure 2018-08-26 13:38:58 +02:00
networking-proxy.nix
networking.nix treewide: remove wkennington as maintainer 2019-01-26 10:05:32 +00:00
nexus.nix nixos/nexus: increase disk size of VM test to 8GB 2019-01-10 22:44:26 +01:00
nfs.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
nghttpx.nix
nginx-sso.nix nixos/tests: add nginx-sso basic functionality test 2019-01-29 19:54:14 +01:00
nginx.nix
nix-ssh-serve.nix nixos/tests/nix-ssh-serve.nix: Use stable nix (#47584) 2018-10-01 23:01:38 +02:00
novacomd.nix nixos/tests/novacomd: prevent non-deterministic failure 2018-09-04 22:46:44 +02:00
nsd.nix
openldap.nix
opensmtpd.nix dovecot, opensmtpd: add link to test in meta.tests 2018-10-30 21:31:39 +09:00
openssh.nix sshd: fix startWhenNeeded and listenAddresses combination 2019-02-25 00:51:58 +01:00
openstack-image.nix nixos/tests/ec2: reuse ssh keys from ssh-keys.nix 2019-02-11 20:58:45 +01:00
osquery.nix
osrm-backend.nix nixos/tests: add osrm-backend test 2019-01-25 00:43:34 +01:00
ostree.nix
overlayfs.nix nixos/overlayfs: add test 2019-03-15 15:15:32 +01:00
pam-oath-login.nix
pam-u2f.nix nixos/pam: refactor U2F, docs about u2f_keys path (#54756) 2019-01-29 08:45:26 -08:00
pantheon.nix pantheon: init a 5.0 2019-01-24 20:54:14 +00:00
partition.nix
peerflix.nix
pgjwt.nix
pgmanage.nix
phabricator.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
php-pcre.nix
plasma5.nix nixos/plasma5: disable ocr tests 2018-10-28 19:13:12 +00:00
plotinus.nix
postgis.nix postgresql: cleanup postgis (#54396) 2019-01-26 21:15:43 +02:00
postgresql.nix nixos/tests/postgresql: fix regression from #55106 2019-02-04 03:56:43 +01:00
powerdns.nix
predictable-interface-names.nix nixos/tests/predictable-interfaces: fix failure on aarch64 2019-03-19 23:20:23 +01:00
printing.nix misc: Remove myself from list of maintainers 2019-03-12 23:50:52 +01:00
prometheus-exporters.nix nixos/prometheus-bind-exporter: add module 2019-01-03 21:14:21 +01:00
prometheus.nix nixos/prometheus: require one alertmanager configuration parameter 2018-11-23 19:45:17 +01:00
prosody.nix nixos/tests/prosody: use sqlite database (#47185) 2018-09-23 10:46:22 +02:00
proxy.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
quagga.nix tests/docs: remove remnants of old allowPing default (#49198) 2018-10-30 22:26:43 +01:00
quake3.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
rabbitmq.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
radarr.nix nixos/radarr: Add test for radarr to ensure startup 2019-01-25 07:11:28 +01:00
radicale.nix
redmine.nix redmine: 3.4.8 -> 4.0.1 (#55234) 2019-02-05 11:51:33 +00:00
riak.nix
roundcube.nix nixos/roundcube: add package option 2019-02-08 13:35:09 +00:00
rspamd.nix nixos/tests/rspamd: fix eval warnings 2019-02-11 02:59:55 +01:00
rss2email.nix rss2email module: init 2018-11-15 23:44:16 +09:00
rsyslogd.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
run-in-machine.nix nixos/tests: Fix wrong arch in runInMachine test 2018-12-07 05:56:53 +01:00
rxe.nix
samba.nix
sddm.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
simple.nix
slim.nix
slurm.nix nixos/tests: make slurm test more reliable 2019-03-09 22:31:40 +01:00
smokeping.nix
snapper.nix
solr.nix solr: 4.10.3 -> 7.5.0, refactor service to reflect major changes in version bump, NixOS test included 2018-11-03 13:14:13 -04:00
sonarr.nix nixos/sonarr: Add test for sonarr to ensure startup 2019-01-25 07:10:40 +01:00
ssh-keys.nix
strongswan-swanctl.nix
subversion.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
sudo.nix
switch-test.nix nixos/tests/switch-test: Ensures the test fails on failure (#55744) 2019-02-14 22:55:16 +01:00
syncthing-relay.nix syncthing-relay module: init 2018-11-19 01:09:54 +01:00
systemd.nix nixos/systemd: Add a regression test for #50273 2018-12-12 15:35:39 +01:00
taskserver.nix
telegraf.nix nixos/telegraf: add test 2019-01-21 11:37:20 +00:00
testdb.sql
timezone.nix
tomcat.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
tor.nix
trac.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
transmission.nix
udisks2.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
upnp.nix tests: upnp: init test for upnp using miniupnpd / miniupnpc 2018-09-15 23:10:25 +02:00
vault.nix
virtualbox.nix treewide: remove wkennington as maintainer 2019-01-26 10:05:32 +00:00
wordpress.nix
xautolock.nix
xdg-desktop-portal.nix
xfce.nix Remove myself as maintainer from packages 2019-02-22 16:14:13 +01:00
xmonad.nix nixos/tests/xmonad: fix terminal title 2018-12-12 21:30:47 +01:00
xrdp.nix
xss-lock.nix nixos/xss-lock: specify a default locker 2019-01-05 16:42:30 +01:00
yabar.nix nixos/yabar: fix module & test (#46954) 2018-09-20 12:47:46 +02:00
zfs.nix tests: refactor to carry the package set as an argument 2018-11-11 23:11:45 +09:00
zookeeper.nix