nixconfigs/nixos/Hash2PubTestbed.nix

{ config, pkgs, experimentUid ? 1000, ... }:

let
  projectDir = "/home/spiollinux/Seafile/Studium/Semester11/INF-PM-FP-ANW";
  projectPath = builtins.toPath projectDir;
  projectMount = "/mnt/project";
  shell = (import (projectDir + "/Hash2Pub/default.nix") {}).shell;
  simulationSetupScript = pkgs.writeShellScriptBin "simulationSetup" ''
    # make cabal-install work offline
    mkdir $HOME/.cabal
    echo "" > $HOME/.cabal/config

    # run simulation script within the shell
    ${pkgs.nix}/bin/nix-shell ${shell.drvPath} --command "cd ${projectMount} && bash ./build/simulationrunner.sh 2>&1"
    '';
  instanceData = builtins.fromJSON (builtins.readFile "${projectDir}/simulationData/inputs/generated/instances_sample.json");

in

{
  privateNetwork = true;
  ephemeral = true;
  bindMounts = {
    "${projectMount}" = { hostPath = projectDir; isReadOnly = false; };
  };

  config = {
    networking = {
      firewall.enable = false;
      interfaces.lo.ipv6.addresses =
        builtins.map (inst: {address = inst.ip; prefixLength = 0;}) instanceData;
        extraHosts = 
          pkgs.lib.concatMapStringsSep "\n" (inst: "${inst.ip} ${inst.hostname}") instanceData;
    };
    # avoid permission problems with project builds
    users.users.experimentor = {
      uid = experimentUid;
      isNormalUser = true;
    };

    # adjust open file limits
    security.pam.loginLimits = [{
        domain = "*"
      ; type = "-"
      ; item = "nofile"
      ; value = "50000"
      ;}];

    environment.systemPackages = [
      pkgs.netcat
      pkgs.iproute
      pkgs.tmux
      pkgs.ping
      pkgs.lsof
      pkgs.iftop
      (pkgs.writeShellScriptBin "doSimulation" ''
        su experimentor -c "${simulationSetupScript}/bin/simulationSetup"
        '')
      pkgs.tcpdump
    ];
  };
}