mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

nixBuilds none: turn the container's own nix-daemon socket and service off

Browse source
This commit is contained in:
atlas 2026-11-05 14:04:31 +01:00 • committed by mara
commit f930571e38
1 changed files with 30 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nix/module-eval/agent-user.nix
View file

@ -134,6 +134,17 @@ let
&& noBuilds.systemd.globalEnvironment.NIX_REMOTE == "daemon"
&& !(builtins.tryEval unknownBuilds.services.hyperhive.agent.nixBuilds).success;
}
{
# The container's own daemon would listen on the tmpfs that hides the
# host socket. The `host` agent is the control: its units are on, so a
# misspelled unit name cannot pass the `none` arms.
name = "nixBuilds none turns the container's own nix-daemon socket and service off, host leaves them on";
ok =
iris.systemd.sockets.nix-daemon.enable
&& iris.systemd.services.nix-daemon.enable
&& !noBuilds.systemd.sockets.nix-daemon.enable
&& !noBuilds.systemd.services.nix-daemon.enable;
}
];
in
runGroup "agent-user" cases