nixos/promtail: fix access to journal

2020-11-10 10:49:27 +01:00
parent 4c64fa224e
commit 31a0b5dff6
2 changed files with 6 additions and 0 deletions
@@ -45,6 +45,8 @@ import ./make-test-python.nix ({ lib, pkgs, ... }:
    machine.wait_for_open_port(3100)
    machine.wait_for_open_port(9080)
    machine.succeed("echo 'Loki Ingestion Test' > /var/log/testlog")
+    # should not have access to journal unless specified
+    machine.fail("systemctl show --property=SupplementaryGroups promtail | grep -q systemd-journal")
    machine.wait_until_succeeds(
        "${pkgs.grafana-loki}/bin/logcli --addr='http://localhost:3100' query --no-labels '{job=\"varlogs\",filename=\"/var/log/testlog\"}' | grep -q 'Loki Ingestion Test'"
    )