fix: request_apply_commit resolves sha locally + rejects non-sha refs
This commit is contained in:
parent
5d27ae3048
commit
f8795dc029
6 changed files with 130 additions and 17 deletions
|
|
@ -652,9 +652,11 @@ pub enum ManagerRequest {
|
|||
Update {
|
||||
name: String,
|
||||
},
|
||||
/// Submit a config commit for the user to approve. `commit_ref` is opaque
|
||||
/// to the host (typically a git sha pointing into the agent's config repo).
|
||||
/// On approval the host applies the change via `nixos-container update`.
|
||||
/// Submit a config commit for the user to approve. `commit_ref` must
|
||||
/// be a commit sha (7-40 hex chars, short or full) in the agent's
|
||||
/// proposed config repo — a branch or tag name is rejected so the
|
||||
/// approval pins an immutable commit. On approval the host applies
|
||||
/// the change via `nixos-container update`.
|
||||
RequestApplyCommit {
|
||||
agent: String,
|
||||
commit_ref: String,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue