test on isolated env

Author: vic

flake.nix

@@ -125,6 +125,23 @@
             fi
           '';
         };
+
+        test-templates = pkgs.writeShellApplication {
+          name = "test-templates";
+          text = ''
+            env -i PATH="${
+              with pkgs;
+              lib.makeBinPath [
+                direnv
+                nix
+                coreutils
+                jq
+                bash
+              ]
+            }" ${pkgs.bash}/bin/bash --noprofile --norc ${./test-templates.bash}
+          '';
+        };
+
       };
 
       apps = perSystem (
@@ -150,25 +167,10 @@
             program = "${(libs pkgs).genFlakes}/bin/gen-flakes";
           };
 
-          test-templates =
-            let
-              app =
-                with pkgs;
-                writeShellApplication {
-                  name = "test-templates";
-                  runtimeInputs = [
-                    direnv
-                    nix
-                    coreutils
-                    jq
-                  ];
-                  text = lib.readFile ./test-templates.bash;
-                };
-            in
-            {
-              type = "app";
-              program = "${app}/bin/test-templates";
-            };
+          test-templates = {
+            type = "app";
+            program = "${(libs pkgs).test-templates}/bin/test-templates";
+          };
         }
       );
 

test-templates.bash

@@ -4,7 +4,8 @@
 
 base="$PWD"
 function test_template() {
-    set -euo pipefail
+    set -vaeuo pipefail
+    env
     template="$1"
     echo "===== $template =====" | tr '[:print:]' '='
     echo "||    $template    ||"
@@ -15,17 +16,14 @@ function test_template() {
     echo "extra-experimental-features = nix-command flakes" > "$HOME/.config/nix/nix.conf"
 
     cd "$out"
-    touch "$out/.envrc" && direnv deny "$out" # temporarily until we setup .envrc
 
     cp -rf "$base/$template"/* "$out/"
 
     nix run "path:$base" --show-trace
     test -e "$HOME/.config/direnv/lib/use_devshell_toml.sh"
 
     # use bash strict inside .envrc
-    echo "set -euo pipefail; source $HOME/.config/direnv/lib/use_devshell_toml.sh; use devshell_toml --show-trace" > "$out/.envrc"
-
-    direnv allow "$out"
+    echo "set -euo pipefail; source $HOME/.config/direnv/lib/use_devshell_toml.sh; use devshell_toml --show-trace" > "$out/.envrc" && direnv allow "$out"
     direnv exec "$out" check
 }