nixos/tests: add ROCm and amdvlk tests

[Flakebi]

Description of changes

Testing ROCm and other software like amdvlk is slightly more difficult, because it needs hardware like GPUs to run on.
This PR adds some infrastructure – make-test-hardware.nix analogous to make-test-python.nix – that makes it easy to write such tests and run them by giving access to the host hardware into the nix build sandbox.

The tests added here are very basic and are meant more for demonstration of how it works (and smoke testing that nothing fundamental is broken).

The added tests can be run with

$(nix-build -A rocm-opencl-icd.impureTests)
$(nix-build -A amdvlk.impureTests)

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 22.11 Release Notes (or backporting 22.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
  • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
• Fits CONTRIBUTING.md.

[Madouura]

I've been very sick for a bit now so I can't divert much energy to testing this ATM, but on the surface it looks fine.
I'm concerned on whether we can "legally" include the sandbox changes in the test itself in nixpkgs however.
cc @Mic92 for an authoritative answer on this.

[Madouura]

Also, card0 is not guaranteed to be an AMD card, I think there should be some logic to ensure it is, and if it is not, if say, card1 exists, test that.

[Flakebi]

Thanks a lot for your comments!

Good point about hydra, I was not sure if it will run all tests by default.
As you suggested, I added a new attribute impureTests, that runs the script, so $(nix-build -A rocm-opencl-icd.impureTests) works.

It’s still using a derivation to run the actual test, so that it’s mostly isolated.
Most importantly, the test does not inherit the users environment variables and it runs in an isolated filesystem without the systems /run/opengl-driver.

@Madouura, I changed the /dev/dri/card* check to accept any card, good point. Get well soon!

Diff compared to the previous version.

[Flakebi]

Putting the tests under the packages is a good idea to keep nixos/tests clean.

I added makeImpureTests to pkgs, like you suggested.

[Flakebi]

Rebased and set teams.rocm.members as maintainer.

[Madouura]

Ran the tests, LGTM.