vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

hive-gateway: tmpfiles rule for /run/hive-agent (argus 🟡 on #829)

Browse source 
Defensive against the fresh-boot-before-any-agent-spawn window where
the bind-mount source wouldn't exist from c0re's per-agent
`set_nspawn_flags` mkdir chain yet. nspawn auto-creates missing
sources, so this is intent-explicit rather than functional fix.
This commit is contained in:
atlas 2026-05-31 16:05:02 +02:00 • committed by mara
commit e1bc9e42f1
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
nix/modules/hive-gateway.nix
View file

@ -279,6 +279,16 @@ in
} }
]; ];
# Ensure the per-agent UDS bind-mount source exists at host boot,
# before the gateway container's first start. nspawn would
# auto-create an empty dir if missing (argus 🟡 on #829), but a
# tmpfiles rule makes the intent explicit and dodges the
# fresh-boot-before-any-agent-spawn window where the dir wouldn't
# exist yet from c0re's per-agent `set_nspawn_flags` mkdir chain.
systemd.tmpfiles.rules = [
"d /run/hive-agent 0755 root root - -"
];
containers.hive-gateway = { containers.hive-gateway = {
autoStart = true; autoStart = true;
ephemeral = false; ephemeral = false;