clan-core/checks/borgbackup/default.nix

(import ../lib/test-base.nix) ({ ... }: {
  name = "borgbackup";

  nodes.machine = { self, pkgs, ... }: {
    imports = [
      self.clanModules.borgbackup
      self.nixosModules.clanCore
      {
        services.openssh.enable = true;
        services.borgbackup.repos.testrepo = {
          authorizedKeys = [
            (builtins.readFile ../lib/ssh/pubkey)
          ];
        };
      }
      {
        clanCore.machineName = "machine";
        clanCore.clanDir = ./.;
        clanCore.state.testState.folders = [ "/etc/state" ];
        environment.etc.state.text = "hello world";
        systemd.tmpfiles.settings."vmsecrets" = {
          "/etc/secrets/borgbackup.ssh" = {
            C.argument = "${../lib/ssh/privkey}";
            z = {
              mode = "0400";
              user = "root";
            };
          };
          "/etc/secrets/borgbackup.repokey" = {
            C.argument = builtins.toString (pkgs.writeText "repokey" "repokey12345");
            z = {
              mode = "0400";
              user = "root";
            };
          };
        };
        clanCore.secretStore = "vm";

        clan.borgbackup = {
          enable = true;
          destinations.test.repo = "borg@localhost:.";
        };
      }
    ];
  };
  testScript = ''
    start_all()
    machine.systemctl("start --wait borgbackup-job-test.service")
    assert "machine-test" in machine.succeed("BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes /run/current-system/sw/bin/borg-job-test list")
  '';
})