vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

harness: prepend /run/wrappers/bin to service path so sudo wrapper resolves (#658 fixup)

Browse source
This commit is contained in:
damocles 2026-05-30 23:27:11 +02:00 • committed by Mara
commit c73c8389ec
2 changed files with 20 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

13
nix/templates/manager.nix
View file

@ -39,11 +39,14 @@ in
# populates /etc/profile, which systemd services don't inherit.
HIVE_ASSETS_DIR = "${pkgs.hyperhive-assets}/share/hyperhive";
};
# See note in agent-base.nix — `/run/current-system/sw` makes the
# harness service PATH track `environment.systemPackages` so anything
# an agent adds to its own `agent.nix` is visible without editing the
# service definition.
path = [ "/run/current-system/sw" ];
# See note in agent-base.nix for the rationale on both entries —
# `/run/wrappers/bin` so the setuid sudo shim resolves before the
# bare nix-store binary (#658 fixup), `/run/current-system/sw`
# so the harness PATH tracks `environment.systemPackages`.
path = [
"/run/wrappers/bin"
"/run/current-system/sw"
];
serviceConfig = {
ExecStart = "${pkgs.hyperhive}/bin/hive-m1nd serve";
Restart = "on-failure";