vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

module-eval: four containers left on the host netns

Browse source
This commit is contained in:
atlas 2026-10-24 03:36:21 +02:00 • committed by mara
commit 03fc548b0a
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/module-eval/swarm-services-switch.nix
View file

@ -617,12 +617,14 @@ let
} }
{ {
# Both values come from ../container-modules/swarm-container.nix. # Both values come from ../container-modules/swarm-container.nix.
# Four of the 14 service containers share the host netns (hive-forge, bao,
# the queue, the log store) and ten have one of their own.
name = "a service container on the host netns runs no firewall or resolvconf of its own"; name = "a service container on the host netns runs no firewall or resolvconf of its own";
ok = ok =
let let
shared = lib.filter (c: !c.privateNetwork) (lib.attrValues serviceContainers); shared = lib.filter (c: !c.privateNetwork) (lib.attrValues serviceContainers);
in in
lib.length shared == 5 lib.length shared == 4
&& lib.all ( && lib.all (
c: !c.config.networking.firewall.enable && !c.config.networking.resolvconf.enable c: !c.config.networking.firewall.enable && !c.config.networking.resolvconf.enable
) shared; ) shared;