vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

docs: clarify per-agent user comment in harness-base.nix

Browse source
This commit is contained in:
damocles 2026-06-01 09:44:43 +02:00 • committed by mara
commit 89030ff1e1
1 changed files with 6 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

18
nix/templates/harness-base.nix
View file

@ -702,18 +702,12 @@ in
} }
]; ];
# Per-agent unix user (#658). Runs the hive-ag3nt / hive-m1nd # Per-agent unix user. Runs the hive-ag3nt / hive-m1nd harness +
# harness + co-process daemons (hive-matrix-daemon) under a # co-process daemons under a non-root principal. UID auto-assigned by
# non-root principal. The user name follows # NixOS. The container activation script (hive-agent-user-migrate)
# `hyperhive.user.name` — defaults to `"agent"` for standalone # chowns the bind-mounted state dir — including credential files
# eval, overridden per-agent by the meta-flake to the agent's # written by hive-c0re before the container was built — to this user
# own label so each container has a uniquely-named user. # on every boot, so agent processes can always read their own tokens.
#
# UID auto-assigned by NixOS (per mara's #8109: "no hardcoded
# uids"). Home is `/home/${userName}`. `wheel` membership +
# the sudoers rule below grants `NOPASSWD: ALL` when
# `passwordlessSudo` is true — same blast radius as the
# previous root-by-default shape, just explicit.
users.users.${userName} = { users.users.${userName} = {
isNormalUser = true; isNormalUser = true;
home = homeDir; home = homeDir;