vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

chore(nix): remove stale 'privsep phase 2' labels from comments

Browse source 
privsep is complete and always on. the phased-rollout framing
is historical — drop it from the inline comments, keeping the
accurate description of what the user + delegation actually do.
This commit is contained in:
atlas 2026-07-04 21:04:18 +02:00
commit 1e986a0270
2 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nix/modules/hive-c0re.nix
View file

@ -795,10 +795,9 @@ in
managerToplevel
];
# Unprivileged coordinator user. hive-c0re runs as this user
# (privsep phase 2); privileged operations are delegated to
# hive-priv which runs as root, socket-activated at
# /run/hive/priv.sock.
# Unprivileged coordinator user. hive-c0re runs as this user;
# privileged operations are delegated to hive-priv which runs as
# root, socket-activated at /run/hive/priv.sock.
users.users.hive-core = {
isSystemUser = true;
group = "hive-core";