feat(#1906): non-root weston gui on a fixed vnc port
This commit is contained in:
parent
5caec9c1a9
commit
3d2e0ef561
5 changed files with 127 additions and 80 deletions
|
|
@ -1772,7 +1772,16 @@ in
|
|||
# bind-mounts and gateway upstream config stay in sync.
|
||||
HIVE_WEB_SOCKET = "/run/hive-agent/${userName}/web.sock";
|
||||
}
|
||||
// otelEnv;
|
||||
// otelEnv
|
||||
// lib.optionalAttrs config.hyperhive.gui.enable {
|
||||
# Tells the harness which fixed VNC port weston bound, and (by
|
||||
# its presence) that gui is enabled — the harness `/screen/ws`
|
||||
# relay reads this instead of a runtime marker file. The port is
|
||||
# container-local + fixed (network isolation is unconditional),
|
||||
# so the same value for every gui agent is fine. See
|
||||
# nix/templates/weston-vnc.nix::hyperhive.gui.vncPort.
|
||||
HIVE_GUI_VNC_PORT = toString config.hyperhive.gui.vncPort;
|
||||
};
|
||||
serviceConfig = {
|
||||
ExecStart = if otel.enable then "${otelExecStart}" else "${pkgs.hyperhive}/bin/${binary} serve";
|
||||
# Pin the journal identity to the binary name. Without this,
|
||||
|
|
|
|||
Loading…
Reference in a new issue