test/sandbox: check seccomp outcome

Signed-off-by: Ophestra <cat@gensokyo.uk>

1 files changed, 27 insertions, 0 deletions

diff --git a/test/sandbox/seccomp.nix b/test/sandbox/seccomp.nix
new file mode 100644
index 00000000..3cf9b582
--- /dev/null
+++ b/test/sandbox/seccomp.nix
@@ -0,0 +1,27 @@
+{
+  writeText,
+  buildGoModule,
+
+  version,
+}:
+let
+  mainFile = writeText "main.go" ''
+    package main
+
+    import "git.gensokyo.uk/security/fortify/test/sandbox"
+
+    func main() { sandbox.MustAssertSeccomp() }
+  '';
+in
+buildGoModule {
+  pname = "check-seccomp";
+  inherit version;
+
+  src = ../.;
+  vendorHash = null;
+
+  preBuild = ''
+    go mod init git.gensokyo.uk/security/fortify/test >& /dev/null
+    cp ${mainFile} main.go
+  '';
+}