testing sudo passing.

gitlab/sudo_passing.yml

+## DO NOT REMOVE this file. some repositories DEPEND on it.
+#
+#############  Build tests ############
+
+.nix-build:
+  stage: build
+  tags:
+    - integration
+
+containers.build:
+  extends: .nix-build
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE nix-build -A containers
+    - rm -rf $CACHE
+
+libnrm.build:
+  extends: .nix-build
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE nix-build -A libnrm
+    - rm -rf $CACHE
+
+nrm.build:
+  extends: .nix-build
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE nix-build -A nrm
+    - rm -rf $CACHE
+
+#############  Integration tests ############
+
+.nix-integration:
+  stage: test
+  artifacts:
+    paths:
+      - _output/*
+    expire_in: 1 week
+    when: always
+  tags:
+    - integration
+
+.TestPower.test:
+  extends: .nix-integration
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE SUDO=$(which sudo) nix-shell --keep SUDO --pure --allow-new-privileges --option build-extra-sandbox-paths $(which sudo | xargs dirname) -A test --run "cp $MANIFESTS/* _output/ ;argotk TestPower --verbose"
+    - rm -rf $CACHE
+
+.TestHello.test:
+  extends: .nix-integration
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE SUDO=$(which sudo) nix-shell --keep SUDO --pure --allow-new-privileges --option build-extra-sandbox-paths $(which sudo | xargs dirname) -A test --run "cp $MANIFESTS/* _output/ ;argotk TestHello --verbose"
+    - rm -rf $CACHE
+
+.TestListen.test:
+  extends: .nix-integration
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE SUDO=$(which sudo) nix-shell --keep SUDO --pure --allow-new-privileges --option build-extra-sandbox-paths $(which sudo | xargs dirname) -A test --run "cp $MANIFESTS/* _output/ ;argotk TestListen --verbose"
+    - rm -rf $CACHE
+
+.TestPerfwrapper.test:
+  extends: .nix-integration
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE SUDO=$(which sudo) nix-shell --keep SUDO --pure --allow-new-privileges --option build-extra-sandbox-paths $(which sudo | xargs dirname) -A test --run "cp $MANIFESTS/* _output/ ;argotk TestPerfwrapper --verbose"
+    - rm -rf $CACHE
+
+.TestSTREAM.test:
+  extends: .nix-integration
+  script:
+    - CACHE=$(mktemp -d --suffix=nixcache /tmp/deletable-nix-cache-XXXX)
+    - XDG_CACHE_HOME=$CACHE SUDO=$(which sudo) nix-shell --keep SUDO --pure --allow-new-privileges --option build-extra-sandbox-paths $(which sudo | xargs dirname) -A test --run "cp $MANIFESTS/* _output/ ;argotk TestSTREAM --verbose"
+    - rm -rf $CACHE
+
+KNL-Power.test:
+  extends: .TestPower.test
+  tags:
+    - knl
+
+Perfwrapper.test:
+  extends: .TestPerfwrapper.test
+KNL-Perfwrapper.test:
+  extends: .TestPerfwrapper.test
+  tags:
+    - knl
+
+Listen.test:
+  extends: .TestListen.test
+KNL-Listen.test:
+  extends: .TestListen.test
+  tags:
+    - knl
+
+Hello.test:
+  extends: .TestHello.test
+KNL-Hello.test:
+  extends: .TestHello.test
+  tags:
+    - knl
+
+KNL-STREAM.test:
+  extends: .TestSTREAM.test
+  tags:
+    - knl