vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(#946): drop hive-priv self-bind fallback (require socket activation) + clarify child-state rw is intentional

Browse source
This commit is contained in:
damocles 2026-06-08 19:38:40 +02:00 • committed by mara
commit 58b5434466
3 changed files with 40 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

3
nix/modules/hive-c0re.nix
View file

@ -894,8 +894,6 @@ in
# Why each entry is needed:
# /etc/nixos-containers — writes <container>.conf (bind mounts,
# network isolation, nspawn flags)
# /run/hive — fallback socket bind if LISTEN_FDS is
# absent (normal path: socket-activated)
# /run/hive-agent — chown/chmod per-agent socket directories
# /run/systemd — container@ unit drop-ins (resource limits)
# + machinectl / systemd-machined state
@ -914,7 +912,6 @@ in
ProtectSystem = "strict";
ReadWritePaths = [
"/etc/nixos-containers"
"/run/hive"
"/run/hive-agent"
"/run/systemd"
"/run/lock"