atlas
8e33de6fb7
nix: hand the review classifier its store leaf as an nspawn credential
...
The leaf's key was copied by a host unit into the container's root on
host disk. nspawn now reads the cert, key and store CA as root at
container start (--load-credential) and passes them in as system
credentials; the daemon's unit loads them by bare id, as an agent's
container does with its own leaf (nix/agent-modules/bao.nix). The copy
unit is gone. Where this host mints the leaf, the container starts after
swarm-bao-pki, since nspawn refuses a missing credential source. An
assertion refuses identity paths with whitespace, which nixos-container's
unquoted extra flags would split.
2026-10-12 13:11:21 +02:00
..
agent-modules
agents: always write the memory cap, infinity for none
2026-10-12 10:59:12 +02:00
container-modules
nix: move the in-container modules to nix/container-modules/
2026-09-29 19:51:46 +02:00
docs
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
host-modules
nix: hand the review classifier its store leaf as an nspawn credential
2026-10-12 13:11:21 +02:00
module-eval
nix: hand the review classifier its store leaf as an nspawn credential
2026-10-12 13:11:21 +02:00
packages
nix: run the review classifier in a container of its own when a host enables it
2026-10-12 13:11:21 +02:00
script-tests
agents: always write the memory cap, infinity for none
2026-10-12 10:59:12 +02:00
templates
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
checks.nix
agents: read the memory cap at boot, not from the build
2026-10-12 10:59:11 +02:00
devshell.nix
swarm-controller: end a dead replay, clamp stale resume ids, test on a real server
2026-10-11 23:26:24 +02:00
journald-severity.nix
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
reserved-hive-fragments.nix
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
reserved-names.nix
agents: remove send(operator) and the operator inbox; alert on turn failures
2026-10-12 08:50:06 +02:00
rust.nix
docs(rust): the dep-cache comment no longer describes two consumers
2026-08-11 22:29:56 +02:00
sources.nix
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt.nix
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00