fix(integration-test): Use deterministic WG keys

This commit is contained in:
Karolin Varner
2025-08-22 16:53:04 +02:00
committed by David Niehues
parent 8ee0619c08
commit d5162d7b9a

View File

@@ -34,11 +34,12 @@ let
generateWgKeys = generateWgKeys =
name: name:
sk:
let let
# The trailing line break that is generated by `wg genkey` and `wg pubkey` breaks the script rp-key-sync.nix to copy the preshared keys. # The trailing line break that is generated by `wg genkey` and `wg pubkey` breaks the script rp-key-sync.nix to copy the preshared keys.
# We therefore remove the trailing spaces here. # We therefore remove the trailing spaces here.
privateKey = pkgs.runCommand "wg-private-${name}" { } '' privateKey = pkgs.runCommand "wg-private-${name}" { } ''
${pkgs.wireguard-tools}/bin/wg genkey > $out echo ${sk} > $out
''; '';
publicKey = pkgs.runCommand "wg-public-${name}" { } '' publicKey = pkgs.runCommand "wg-public-${name}" { } ''
cat ${privateKey} | ${pkgs.wireguard-tools}/bin/wg pubkey > $out cat ${privateKey} | ${pkgs.wireguard-tools}/bin/wg pubkey > $out
@@ -48,9 +49,9 @@ let
inherit privateKey publicKey; inherit privateKey publicKey;
}; };
peerAWgKeys = generateWgKeys "peerA"; peerAWgKeys = generateWgKeys "peerA" "EMeaSKGSSWQFuA8xhca+potK7B43hPsJ9XkUXtfaNF0=";
peerBWgKeys = generateWgKeys "peerB"; peerBWgKeys = generateWgKeys "peerB" "ANLij+xiMYmxpFjYcOTt4z8pX1a91Gsg4ZLpcCrjGVg=";
peerCWgKeys = if multiPeer then generateWgKeys "peerC" else null; peerCWgKeys = if multiPeer then generateWgKeys "peerC" "COOk7sSt34r3xtwCvOdqQiv2Pf4auKI+Btgyce2fw1w=" else null;
generateRPKeys = generateRPKeys =
name: rosenpassVersion: name: rosenpassVersion: