dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #306239 from mweinelt/incus-vtpm

Browse Source 
nixos/incus: add support for software TPMs
This commit is contained in:
Adam C. Stephens 2024-04-23 09:24:21 -04:00 committed by GitHub
commit d274696071
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nixos/modules/virtualisation/incus.nix
View File

@ -41,6 +41,7 @@ let
qemu-utils
rsync
squashfsTools
swtpm
systemd
thin-provisioning-tools
util-linux

11
nixos/tests/incus/virtual-machine.nix
View File

@ -30,6 +30,9 @@ in
memorySize = 1024;
diskSize = 4096;
# Provide a TPM to test vTPM support for guests
tpm.enable = true;
incus.enable = true;
};
networking.nftables.enable = true;
@ -47,8 +50,14 @@ in
with subtest("virtual-machine image can be imported"):
machine.succeed("incus image import ${vm-image-metadata}/*/*.tar.xz ${vm-image-disk}/nixos.qcow2 --alias nixos")
with subtest("virtual-machine can be created"):
machine.succeed("incus create nixos ${instance-name} --vm --config limits.memory=512MB --config security.secureboot=false")
with subtest("virtual tpm can be configured"):
machine.succeed("incus config device add ${instance-name} vtpm tpm path=/dev/tpm0")
with subtest("virtual-machine can be launched and become available"):
machine.succeed("incus launch nixos ${instance-name} --vm --config limits.memory=512MB --config security.secureboot=false")
machine.succeed("incus start ${instance-name}")
with machine.nested("Waiting for instance to start and be usable"):
retry(instance_is_up)