vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

chore(nix): remove stale 'privsep phase 2' labels from comments

Browse source 
privsep is complete and always on. the phased-rollout framing
is historical — drop it from the inline comments, keeping the
accurate description of what the user + delegation actually do.
This commit is contained in:
atlas 2026-07-04 21:04:18 +02:00
commit 1e986a0270
2 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/modules/hive-gateway.nix
View file

@ -423,7 +423,7 @@ in
#
# /run/hive-agent — per-agent UDS socket dir, written by c0re's
# set_nspawn_flags when agents start. Owned by `hive-core` (the
# unprivileged coordinator user, privsep phase 2): c0re does the
# unprivileged coordinator user): c0re does the
# `create_dir_all(/run/hive-agent/<name>)` itself, so a root-owned
# parent would EACCES on the very first agent create on a fresh host
# (hive-priv only chowns the subdir afterwards, it doesn't make it).