1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
import pytest
import json

from testlib.fixtures.nix import Nix, NixDaemon


@pytest.mark.parametrize(
    ("trusted", "flags", "expected"),
    [
        ([], ["--default-trust"], False),
        ([], ["--force-trusted"], True),
        (["*"], ["--default-trust"], True),
        (["*"], ["--force-untrusted"], False),
    ],
)
def test_trust(nix: Nix, daemon: NixDaemon, trusted: list[str], flags: list[str], expected: bool):
    nix.settings.add_xp_feature("nix-command", "daemon-trust-override")

    with daemon(nix, flags, settings={"trusted-users": trusted}) as inner:
        trusted = json.loads(inner.nix(["store", "ping", "--json"]).run().ok().stdout)
        assert trusted["trusted"] == expected