fix(integration-test): Use deterministic WG keys

This commit is contained in:
Karolin Varner
2025-08-22 16:53:04 +02:00
committed by David Niehues
parent 8ee0619c08
commit d5162d7b9a

View File

@@ -34,11 +34,12 @@ let
generateWgKeys =
name:
sk:
let
# The trailing line break that is generated by `wg genkey` and `wg pubkey` breaks the script rp-key-sync.nix to copy the preshared keys.
# We therefore remove the trailing spaces here.
privateKey = pkgs.runCommand "wg-private-${name}" { } ''
${pkgs.wireguard-tools}/bin/wg genkey > $out
echo ${sk} > $out
'';
publicKey = pkgs.runCommand "wg-public-${name}" { } ''
cat ${privateKey} | ${pkgs.wireguard-tools}/bin/wg pubkey > $out
@@ -48,9 +49,9 @@ let
inherit privateKey publicKey;
};
peerAWgKeys = generateWgKeys "peerA";
peerBWgKeys = generateWgKeys "peerB";
peerCWgKeys = if multiPeer then generateWgKeys "peerC" else null;
peerAWgKeys = generateWgKeys "peerA" "EMeaSKGSSWQFuA8xhca+potK7B43hPsJ9XkUXtfaNF0=";
peerBWgKeys = generateWgKeys "peerB" "ANLij+xiMYmxpFjYcOTt4z8pX1a91Gsg4ZLpcCrjGVg=";
peerCWgKeys = if multiPeer then generateWgKeys "peerC" "COOk7sSt34r3xtwCvOdqQiv2Pf4auKI+Btgyce2fw1w=" else null;
generateRPKeys =
name: rosenpassVersion: