From 04214a6afa1abd2e0e85c08ac82ffe89c9924f03 Mon Sep 17 00:00:00 2001 From: atlas Date: Sat, 24 Oct 2026 14:54:50 +0200 Subject: [PATCH] Revert "module-eval: four containers left on the host netns" This reverts commit 03fc548b0ac57c2b51a58d72a0b9505b8abee3de. --- nix/module-eval/swarm-services-switch.nix | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/nix/module-eval/swarm-services-switch.nix b/nix/module-eval/swarm-services-switch.nix index 56fd0be9..8b78bd2a 100644 --- a/nix/module-eval/swarm-services-switch.nix +++ b/nix/module-eval/swarm-services-switch.nix @@ -617,14 +617,12 @@ let } { # Both values come from ../container-modules/swarm-container.nix. - # Four of the 14 service containers share the host netns (hive-forge, bao, - # the queue, the log store) and ten have one of their own. name = "a service container on the host netns runs no firewall or resolvconf of its own"; ok = let shared = lib.filter (c: !c.privateNetwork) (lib.attrValues serviceContainers); in - lib.length shared == 4 + lib.length shared == 5 && lib.all ( c: !c.config.networking.firewall.enable && !c.config.networking.resolvconf.enable ) shared;