test: unit test autofirma-truststore. Closes #110

flake.nix

@@ -16,6 +16,10 @@
     python-updates.url = "github:NixOS/nixpkgs/python-updates";  # Until #376856 get's into nixos-unstable
     home-manager.url = "github:nix-community/home-manager";
     flake-parts.url = "github:hercules-ci/flake-parts";
+    flake-parts.inputs.nixpkgs-lib.follows = "nixpkgs";
+    nix-unit.url = "github:nix-community/nix-unit";
+    nix-unit.inputs.nixpkgs.follows = "nixpkgs";
+    nix-unit.inputs.flake-parts.follows = "flake-parts";
   };
 
   # Autofirma sources
@@ -45,6 +49,7 @@
     jmulticard-src,
     clienteafirma-external-src,
     autofirma-src,
+    nix-unit
   }:
     flake-parts.lib.mkFlake {inherit inputs;} {
       flake = {
@@ -81,6 +86,7 @@
           dnieremote = pkgs.callPackage ./nix/dnieremote/default.nix {openssl_1_1 = ignoreVulnerable_openssl_1_1;};
           configuradorfnmt = pkgs.callPackage ./nix/configuradorfnmt/default.nix {};
         };
+        tests = import ./nix/tests/unit { inherit self; }; 
         checks.x86_64-linux = let
           pkgs = nixpkgs.legacyPackages.x86_64-linux;
         in {
@@ -117,6 +123,7 @@
       ];
       imports = [
         inputs.flake-parts.flakeModules.easyOverlay
+        inputs.nix-unit.modules.flake.default
       ];
       perSystem = {
         config,
@@ -163,6 +170,7 @@
             update-fixed-output-derivations
             download-autofirma-trusted-providers
             download-url-linked-CAs
+            nix-unit.packages.${system}.default
           ];
         };
         packages = let

nix/tests/unit/default.nix

@@ -0,0 +1,29 @@
+{ self }:
+with builtins;
+let
+  ascendingOrder = sort lessThan;
+  truststorePath = "${self}/nix/autofirma/truststore";
+  providers = fromJSON (readFile "${truststorePath}/prestadores/providers.json");
+  allCAFiles = attrNames (readDir "${truststorePath}/prestadores/CAs-by-provider");
+  CAFetchLinks = fromJSON (readFile "${truststorePath}/prestadores/CAs_fetch_links.json");
+in
+{
+  testProviderListIsNotEmpty = {
+    expr = length providers > 0;
+    expected = true;
+  };
+  testCAFilesAndTrustedProvidersMatch = let
+    trimJsonExt = s: substring 0 ((stringLength s) - (stringLength ".json")) s;
+  in {
+    expr = ascendingOrder (map trimJsonExt allCAFiles);
+    expected = ascendingOrder (map (p: p.cif) providers);
+  };
+  testAllCAFilesHaveFetchLinkEntry = {
+    expr = ascendingOrder (map (p: p.cif) CAFetchLinks);
+    expected = ascendingOrder (map (p: p.cif) providers);
+  };
+  testAllFetchLinksHaveURLField = {
+    expr = all (link: hasAttr "url" link) CAFetchLinks;
+    expected = true;
+  };
+}