vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

nix/harness: ExecStartPre chown /run/hive to agent user (#658 fixup)

Browse source
This commit is contained in:
müde 2026-05-30 22:14:32 +02:00
commit de3f541729
3 changed files with 16 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nix/templates/agent-base.nix
View file

@ -38,6 +38,14 @@ in
ExecStart = "${pkgs.hyperhive}/bin/hive-ag3nt serve";
Restart = "on-failure";
RestartSec = 2;
# `/run/hive` is bind-mounted from the host root-owned 0755
# (hive-c0re's `set_nspawn_flags`). Post-#658 the harness
# runs as the per-agent user and needs to drop mcp.sock +
# claude-{mcp-config,settings,system-prompt} files there.
# `+` runs ExecStartPre as root (before the User= drop) so
# we can chown the bind onto the agent user every start —
# robust against activation-script timing on first boot.
ExecStartPre = "+${pkgs.coreutils}/bin/chown ${userName}:${userName} /run/hive";
# Run the harness as the per-agent user (#658). claude itself
# spawned by the harness then runs as that user too — drops
# root inside the container while sudo (`NOPASSWD: ALL` by