0020 Disable sandbox for tests

0020 Disable sandbox for tests#

Context and Problem Statement#

k0s cluster tests need container images. The NixOS test framework runs inside the Nix build sandbox which blocks all network access.

How should tests get access to container images?

Considered Options#

  1. Disable the sandbox via --option sandbox false

  2. Pre-load all container images as Nix store paths

  3. Run a container registry as a test node, pre-loaded via additionalPaths

Decision Outcome#

Disable the sandbox.

This is the simplest path to get cluster tests running and be able to focus on splitting out the kubernetes layer.

Consequences#

The tests will depend on --option sandbox false and won’t be fully reproducible for now.

Fixing this could be done in the future by providing needed resources into the test setup.