atlas
95b89970ee
swarm-victoriametrics: require 1.153.0, carry the history off the DynamicUser path
...
The socket scheme needs VictoriaMetrics 1.153.0 or later: older builds
create the socket 0600 whatever the umask, so nginx could not connect
and every consumer would get 502 with the module evaluating clean.
deploy.victoriametrics.package is an operator option, so an assertion
now refuses an older one, naming the option and the reason.
Turning DynamicUser off moves the state directory from
/var/lib/private/victoriametrics (behind a /var/lib/victoriametrics
symlink) to a plain /var/lib/victoriametrics. A oneshot ordered before
the store moves the old directory there and chowns it to the static
user when the plain path is the old symlink, empty, or missing, and does
nothing once the private directory is gone. Without it the persistent
container's history depends on systemd's own DynamicUser-off migration.
Refs #4815
2026-10-14 18:15:20 +02:00
..
agent-forge-bao.nix
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agent-github-bao.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-icon.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-matrix.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-memory.nix
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
agent-otel.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-plugins.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-queue-bao.nix
module-eval: restore agentWith in agent-queue-bao.nix
2026-10-13 14:56:25 +02:00
agent-runtime.nix
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agent-user.nix
module-eval: agent-user test asserts the heal_own_dir form
2026-10-09 11:30:30 +02:00
bao-basics.nix
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
bao-controller.nix
swarmctl: on a controller host, trust the swarm's root without SWARMCTL_CA_FILE
2026-10-14 12:49:16 +02:00
bao-grants.nix
review classifier: run on ACP when the swarm settings choose it
2026-10-14 10:14:36 +02:00
bao-matrix-reader.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
bao-otel-collector.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
builder.nix
swarm-builder: scope the forge token to the forge, one build at a time, opt-in
2026-10-14 03:30:46 +02:00
core-toggle.nix
swarm-logs-auth: run as a static user so nginx reaches its socket
2026-10-14 17:55:28 +02:00
forge-placement.nix
swarm-otel: authelia is no longer declared as both a loopback and a published scrape target
2026-10-14 10:28:48 +02:00
grafana.nix
glue: otel scrape targets for authelia, grafana and nats move out of the services
2026-10-14 01:40:40 +02:00
hive-otel.nix
hive otel: keep file_storage defined when the collector authenticates upstream
2026-10-14 10:13:58 +02:00
hive-tls.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
journald-severity.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
lib.nix
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
matrix-core.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
name-guards.nix
swarm: refuse swarm.hives keys that are not valid hive identifiers
2026-10-12 21:45:50 +02:00
nats-authelia.nix
glue: otel scrape targets for authelia, grafana and nats move out of the services
2026-10-14 01:40:40 +02:00
nats-tls.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
secret-publisher.nix
glue: the secret publisher's authelia-dependent settings move out of the publisher module
2026-10-14 01:52:53 +02:00
shared.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
swarm-otel-core.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
swarm-otel-identity.nix
swarm-victoriametrics: own network namespace, gateway over a unix socket
2026-10-14 18:15:20 +02:00
swarm-services-switch.nix
swarm-victoriametrics: require 1.153.0, carry the history off the DynamicUser path
2026-10-14 18:15:20 +02:00