vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: add hyperhive.user.name + passwordlessSudo to agent configuration (follow-up to #664)

Browse source
This commit is contained in:
lexis 2026-05-30 23:29:33 +02:00 • committed by Mara
commit bed2eba52a
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -178,6 +178,14 @@ the container as environment variables. Common options:
`<state>/matrix-token` is absent (i.e., the host-level
`hyperhive.matrix` tuwunel container hasn't provisioned the account
yet). Set to `false` to opt a specific agent out of matrix.
- **`hyperhive.user.name`** — Unix username the agent runs as inside
the container (default: the agent's own label, injected by the
meta-flake). Agents no longer run as root. Stand-alone module eval
without the meta-flake falls back to `"agent"`.
- **`hyperhive.user.passwordlessSudo`** — Boolean (default `true`).
Grants the agent user `NOPASSWD: ALL` sudo so claude's `Bash` tool
can still escalate when needed — same surface as the old root-user
shape, just explicit. Set `false` for strictly unprivileged agents.
See `nix/templates/harness-base.nix` for the full list of options and
their descriptions.