vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

give openbao's own start the container's long timeout

Browse source
This commit is contained in:
atlas 2026-11-01 15:03:28 +01:00
commit 8d31f0ad27
1 changed files with 51 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

17
nix/module-eval/hive-tls.nix
View file

@ -853,10 +853,19 @@ let
) names;
}
{
# The container is `Type=notify`: its start job lasts as long as
# OpenBao's first start, which a 1min limit cuts off mid-open.
name = "the store's container is given five minutes to start";
ok = lib.hasInfix "TimeoutStartSec=5min" allLocal.systemd.units."container@swarm-bao.service".text;
# The container is `Type=notify`: its start job spans OpenBao's first
# start, so OpenBao's own limit is raised too and sits a minute below
# the container's. `Restart=` comes from upstream, so it shows the
# lookup reaches the real unit.
name = "openbao's start limit is raised and stays below its container's";
ok =
let
inner = allLocal.containers.swarm-bao.config.systemd.services.openbao.serviceConfig;
unit = allLocal.systemd.units."container@swarm-bao.service".text;
in
inner.Restart == "on-failure"
&& inner.TimeoutStartSec == 240
&& lib.hasInfix "TimeoutStartSec=300s" unit;
}
{
name = "hive-priv is told the cache's address by the host's configuration";