docs(priv_proto): update ReloadGatewayNginx comment — state-aware dispatch
The implementation now queries ActiveState and dispatches reload/ reset-start/start rather than blindly calling systemd-run nginx -s reload. Clarify that machine-bus transport requires root.
This commit is contained in:
parent
6fab0d7f1a
commit
c7ea495bf9
1 changed files with 7 additions and 2 deletions
|
|
@ -182,8 +182,13 @@ pub enum PrivRequest {
|
||||||
/// Run `systemctl daemon-reload`.
|
/// Run `systemctl daemon-reload`.
|
||||||
DaemonReload,
|
DaemonReload,
|
||||||
|
|
||||||
/// Reload nginx inside the `hive-gateway` container via
|
/// Synchronise the nginx unit inside the `hive-gateway` container.
|
||||||
/// `systemd-run --machine=hive-gateway nginx -s reload`.
|
/// hive-priv queries `ActiveState` and dispatches:
|
||||||
|
/// - `active` → `systemctl reload nginx` (SIGHUP, zero-downtime)
|
||||||
|
/// - `failed` → `systemctl reset-failed nginx` + `systemctl start nginx`
|
||||||
|
/// - otherwise → `systemctl start nginx`
|
||||||
|
/// Requires root: `--machine=hive-gateway` enters the container
|
||||||
|
/// namespace via the machine bus (forbidden for unprivileged users).
|
||||||
ReloadGatewayNginx,
|
ReloadGatewayNginx,
|
||||||
|
|
||||||
// --- Socket dir ownership ---
|
// --- Socket dir ownership ---
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue