vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

swarm-bao, swarm-nats: bound each attempt of the hand-copied store-retry units

Browse source 
The granting units (granterPolicyUnit's 17, swarm-bao-granter-role,
swarm-bao-controller-policy, swarm-bao-agent-pki) and swarm-bao-nats-tls
copy store-retry's restart budget by hand, are Type=oneshot, and set no
TimeoutStartSec, so systemd gives each attempt no start timeout. A store
that accepts a connection and never answers leaves the attempt running
forever: Restart=on-failure never fires, units ordered after it wait, and
swarm-bao-nats-tls's daily timer starts a unit that is still activating.

Each now sets TimeoutStartSec: 60 for the granting units and the
granter's role, 2min for controller-policy (it may generate the services
root), 5min for agent-pki and nats-tls (each may wait on a blocking
restart of a server in a container). module-eval-bao-grants and
module-eval-nats-tls assert the bound is finite.

The restart budget itself is unchanged; that is #5305.

Closes #5306
This commit is contained in:
atlas 2026-10-15 11:03:42 +02:00 • committed by mara
commit 2ab8be61a2
4 changed files with 38 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/host-modules/swarm-nats.nix
View file

@ -1043,6 +1043,10 @@ in
SyslogIdentifier = "swarm-bao-nats-tls";
Restart = "on-failure";
RestartSec = 30;
# An attempt that rotates the leaf waits on a blocking restart of the
# server in its container: up to 150s to stop (nixpkgs' nats module)
# and 90s to start.
TimeoutStartSec = "5min";
};
environment = {
BAO_ADDR = "https://${baoCfg.domain}:${toString baoCfg.port}";