From e1bc9e42f1ffed59f99450ae0a2d854e6be9b731 Mon Sep 17 00:00:00 2001 From: atlas Date: Sun, 31 May 2026 16:05:02 +0200 Subject: [PATCH] =?UTF-8?q?hive-gateway:=20tmpfiles=20rule=20for=20/run/hi?= =?UTF-8?q?ve-agent=20(argus=20=F0=9F=9F=A1=20on=20#829)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Defensive against the fresh-boot-before-any-agent-spawn window where the bind-mount source wouldn't exist from c0re's per-agent `set_nspawn_flags` mkdir chain yet. nspawn auto-creates missing sources, so this is intent-explicit rather than functional fix. --- nix/modules/hive-gateway.nix | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/nix/modules/hive-gateway.nix b/nix/modules/hive-gateway.nix index 6f63acbf..ae787d37 100644 --- a/nix/modules/hive-gateway.nix +++ b/nix/modules/hive-gateway.nix @@ -279,6 +279,16 @@ in } ]; + # Ensure the per-agent UDS bind-mount source exists at host boot, + # before the gateway container's first start. nspawn would + # auto-create an empty dir if missing (argus 🟡 on #829), but a + # tmpfiles rule makes the intent explicit and dodges the + # fresh-boot-before-any-agent-spawn window where the dir wouldn't + # exist yet from c0re's per-agent `set_nspawn_flags` mkdir chain. + systemd.tmpfiles.rules = [ + "d /run/hive-agent 0755 root root - -" + ]; + containers.hive-gateway = { autoStart = true; ephemeral = false;