nix: add a NixOS test kit for Tailscale clients

nixosModules.testkit makes a node a control server every client joins without
trust setup; testkit-peer joins it with hs-join.
This commit is contained in:
Kristoffer Dalby
2026-09-28 13:36:45 +00:00
committed by Kristoffer Dalby
parent 35a90e0018
commit 200c2c01e8
6 changed files with 297 additions and 1 deletions
+6
View File
@@ -331,3 +331,9 @@ a broken one.
- **Do not edit `gen/`** — it is regenerated from `proto/` by
`make generate`.
- **Proto changes + code changes should be two commits**, not one.
- **The NixOS test kit is a public contract** consumed by other projects'
NixOS tests: the "Contract" in `nix/README.md`, covering
`nix/testkit.nix`, `nix/testkit-peer.nix`, the embedded DERP region
and `HEADSCALE_DEBUG_INSECURE_TLS_LISTEN_ADDR`, and the CLI commands
`hs-authkey` calls. Breaking it needs a "NixOS test kit" BREAKING entry
in `CHANGELOG.md`.