vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

hive-core's git ignores the host's credential helpers, so a meta fetch never waits on an interactive one

Browse source 
hive-core's .gitconfig now resets credential.helper (globally and for the
forge URL) before adding hive-forge. git runs every matching helper, system
config first, so a host-level `oauth` helper blocked `nix flake update`'s
git ls-remote of agent-configs forever.

On deploy: the boot sweep's meta_lock completes and rebuilds run.
This commit is contained in:
atlas 2026-10-20 00:01:56 +02:00
commit 2777453c17
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nix/host-modules/hive-c0re/default.nix
View file

@ -48,10 +48,18 @@ let
# render). The `[credential]` stanza points git at the `hive-forge` helper # render). The `[credential]` stanza points git at the `hive-forge` helper
# below, scoped to the forge host, for any `git+http` fetch from it as the # below, scoped to the forge host, for any `git+http` fetch from it as the
# forge `core` user. hive-c0re's own forge reads use `forge::reader_token()` instead. # forge `core` user. hive-c0re's own forge reads use `forge::reader_token()` instead.
#
# git runs every matching `credential.helper`, system config first, so a
# host helper (e.g. `oauth`, which waits on a browser) would run ahead of
# ours. An empty `helper =` resets the list; it comes first at both the
# global and the forge level so no /etc/gitconfig helper survives.
safeDirGitconfig = pkgs.writeText "hyperhive-safe-gitconfig" '' safeDirGitconfig = pkgs.writeText "hyperhive-safe-gitconfig" ''
[safe] [safe]
directory = * directory = *
[credential]
helper =
[credential "http://${config.services.hyperhive.swarm.forge.domain}"] [credential "http://${config.services.hyperhive.swarm.forge.domain}"]
helper =
helper = hive-forge helper = hive-forge
username = core username = core
[http] [http]