another take on basic contracts

- adds "secret" consumer `nixosModules.userSecret`
- binds secret provider `testing.hardcodedSecret.rootPassword` with
  secret consumer `users.users.root.passwordSecret`

1 files changed, 18 insertions, 41 deletions

diff --git a/default.nix b/default.nix
index 5fe0306..03a67f4 100644
--- a/default.nix
+++ b/default.nix
@@ -3,47 +3,24 @@
 }:
 with (import ./lib {});
 eval {
-  machines.bob = { self, config, ... }: {
-    imports = [
-      ./consumers/users.nix
-      ./contracts/secrets.nix
-      ./providers/asecret.nix
-    ];
-    networking.hostName = "bob";
-    asecret.secrets.provider = config.userPasswords.secrets;
-    userPasswords.secrets.consumer = config.asecret.secrets;
-  };
+  machines.bob.imports = [
+    ({ self, config, ... }: {
+      imports = [
+        "${sources.nixpkgs}/nixos/modules/testing/hardcodedSecret.nix"
+        ./modules/userSecret.nix
+      ];
+      networking.hostName = "bob";
+
+     testing.hardcodedSecret.rootPassword = {
+       secret.consumer = config.users.users.root.passwordSecret;
+       content = "nixos";
+     };
+
+     users.users.root.passwordSecret.provider =
+       config.testing.hardcodedSecret.rootPassword.secret;
+    })
+  ];
   machines.alice = {
     networking.hostName = "alice";
   };
-} // 
-(let
-  lib = pkgs.lib;
-  config = {};
-in
-{
-  test = 
-    let
-      inherit ((import ./contracts/secrets.nix {
-        inherit lib;
-      }).contracts.secrets) behaviorTest;
-    in
-    pkgs.testers.runNixOSTest ({
-      name = "contracts-filebackup-restic";
-      meta.maintainers = [ lib.maintainers.ibizaman ];
-      # I tried using the following line but it leads to infinite recursion.
-      # Instead, I made a hacky import. pkgs.callPackage was also giving an
-      # infinite recursion.
-      #
-      #     } // config.contracts.secret.behaviorTest {
-      #
-    } // behaviorTest {
-      providerRoot = [ "testing" "asecret" "mysecret" "secret" ];
-      extraModules = [
-        ./providers/asecret.nix
-        ({ config, ... }: {
-          testing.asecret.mysecret.content = config.test.content;
-        })
-      ];
-    });
-})
+}