vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

priv: derive flake ref from agent name; WriteNspawnFlags takes flags only

Browse source
This commit is contained in:
damocles 2026-06-01 17:15:06 +02:00 • committed by mara
commit 89d0937473
3 changed files with 64 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

13
hive-sh4re/src/priv_proto.rs
View file

@ -29,10 +29,12 @@ pub enum PrivRequest {
KillContainer { name: String },
/// `nixos-container update <name> --flake <flake_ref>`
UpdateContainer { name: String, flake_ref: String },
/// The flake ref is derived from `name` by hive-priv.
UpdateContainer { name: String },
/// `nixos-container create <name> --flake <flake_ref>`
CreateContainer { name: String, flake_ref: String },
/// The flake ref is derived from `name` by hive-priv.
CreateContainer { name: String },
/// `nixos-container destroy <name>`
DestroyContainer { name: String },
@ -42,9 +44,10 @@ pub enum PrivRequest {
// --- Config file writes ---
/// Overwrite `/etc/nixos-containers/<container>.conf` with new content.
/// Written by `lifecycle::set_nspawn_flags` to inject `EXTRA_NSPAWN_FLAGS`.
WriteNspawnConf { container: String, content: String },
/// Update `/etc/nixos-containers/<container>.conf`: strip network-isolation
/// vars, force `PRIVATE_NETWORK=0`, and set `EXTRA_NSPAWN_FLAGS`.
/// Written by `lifecycle::set_nspawn_flags`.
WriteNspawnFlags { container: String, extra_nspawn_flags: String },
/// Write `/run/systemd/system/container@<container>.service.d/hyperhive-limits.conf`
/// with `[Service]\nMemoryMax=<memory_max>\nCPUQuota=<cpu_quota>\n`.