vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

declare the root-check link on hosts without a controller too

Browse source
This commit is contained in:
atlas 2026-10-30 11:18:53 +01:00
commit 7eb9db47d6
1 changed files with 23 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nix/module-eval/swarm-services-switch.nix
View file

@ -616,7 +616,16 @@ let
&& (s.hive-c0re.wantedBy or [ ]) == [ ]
&& !(swarmServicesOnly.systemd.sockets ? hive-c0re)
&& !(swarmServicesOnly.systemd.sockets ? hive-priv)
&& !(s ? swarm-bao-queue-agent);
&& !(s ? swarm-bao-queue-agent)
# The root check the platform containers carry runs through a link
# this host still declares, since no controller module does. Presence
# control: the unit and the rule are both found.
&& lib.any (
r: lib.hasPrefix "L+ /run/hive-rootfs-check " r
) swarmServicesOnly.systemd.tmpfiles.rules
&& lib.any (
p: lib.hasPrefix "-/run/hive-rootfs-check check-rootfs --warn-only " (toString p)
) s."container@swarm-bao".serviceConfig.ExecStartPre;
}
{
# On a controller that runs none of them, so the link cannot come from