XXX: migration test progress with encryption

Author: hertrste

modules/testing/default.nix

@@ -40,10 +40,14 @@ let
         ];
 
         environment.variables = adminEnv;
+
         # pw: root
         users.users.root.hashedPassword = lib.mkForce "$y$j9T$HiT/m702z/73g4Dt5RzbW0$b3SaYI1FoyT/ORV/qFR/s9zonJBKDn4p2XKyYM2wp1.";
         users.users.root.hashedPasswordFile = null;
 
+        # Workaround bug preventing SSH connection
+        environment.etc."ssh/ssh_config".enable = false;
+
         services.openssh = {
           enable = true;
           ports = [ 22 ];

tests/default.nix

@@ -11,7 +11,7 @@ let
       inherit nixosModules novaPkg libvirt;
     };
     openstack-live-migration = pkgs.callPackage ./openstack-live-migration.nix {
-      inherit nixosModules generateRootwrapConf;
+      inherit nixosModules generateRootwrapConf novaPkg;
     };
   };
 in

tests/openstack-default-setup.nix

@@ -2,7 +2,6 @@
   pkgs,
   nixosModules,
   novaPkg,
-  libvirt,
 }:
 pkgs.nixosTest {
   name = "OpenStack default setup test";
@@ -25,7 +24,7 @@ pkgs.nixosTest {
   nodes.computeVM =
     { ... }:
     {
-      virtualisation.libvirtd.package = libvirt;
+      #virtualisation.libvirtd.package = libvirt;
       imports = [
         nixosModules.computeModule
         nixosModules.testModules.testCompute

tests/openstack-live-migration.nix

@@ -2,12 +2,14 @@
   pkgs,
   nixosModules,
   generateRootwrapConf,
+  novaPkg,
 }:
 let
   novaConfigForIp =
     ip:
     { config, pkgs, ... }:
     {
+      nova.novaPackage = novaPkg;
       nova.config =
         let
           nova_env = pkgs.python3.buildEnv.override {
@@ -58,8 +60,9 @@ let
 
           [libvirt]
           virt_type = kvm
-          cpu_mode = custom
-          cpu_model = qemu64
+          images_type = default
+          images_format = raw
+          force_raw_images = true
 
           [neutron]
           auth_url = http://controller:5000
@@ -109,6 +112,9 @@ let
 
           [os_region_name]
           openstack =
+
+          [cinder]
+          os_region_name = RegionOne
         '';
     };
 in
@@ -174,6 +180,15 @@ pkgs.nixosTest {
       systemd.network.networks.eth1.networkConfig.Address = pkgs.lib.mkForce "10.0.0.40/24";
     };
 
+  nodes.storageVM =
+    { ... }:
+    {
+      imports = [
+        nixosModules.storageModule
+        nixosModules.testModules.testStorage
+      ];
+    };
+
   testScript =
     { ... }:
     ''
@@ -270,6 +285,18 @@ pkgs.nixosTest {
 
       assert retry_until_succeed(controllerVM, f"ip netns exec {net_ns} ping -c 1 {vm_ip}", 30)
 
+      # create volume with 4GB
+      controllerVM.execute("openstack volume type create --encryption-provider luks --encryption-cipher aes-xts-plain64 --encryption-key-size 256 --encryption-control-location front-end nfs-luks")
+      controllerVM.execute("openstack volume type set nfs-luks --property volume_backend_name=NFS")
+      controllerVM.execute("openstack volume create --size 1 --type nfs-luks test_vol")
+
+      time.sleep(10)
+
+      # attach volume to VM
+      controllerVM.execute("openstack server add volume test_vm test_vol")
+
+      breakpoint()
+
       print(f"Start migration from src: {host} to destination {dst_host}")
       controllerVM.succeed(f"openstack server migrate --live-migration --host {dst_host} test_vm")