atlas
b03549fde6
snapshot store: bound the transfer on both ends
...
The receiver blocked in read until a peer sent a header, and a stalled
btrfs receive was never reaped, so a silent or stuck connection held a
root service instance indefinitely. The receiver now gives the header 30 s
and the unit has RuntimeMaxSec=6h.
The sender had no deadline on the TCP connect or the header write, so an
unreachable mesh address held the admin-socket handler until the kernel
gave up. Both now time out after 15 s and report it like any other
failure. The stream body stays unbounded on the sender: the receiver's
RuntimeMaxSec already caps it, and btrfs send writes it outside this
process.
2026-10-16 11:45:58 +02:00
..
agent-modules
permissions: drop the capability and tool-group wording left after the rework
2026-10-15 18:01:40 +02:00
builder /check-flake
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
container-modules
swarm-nats: forward the queue container's journal to the swarm collector
2026-10-16 09:08:21 +02:00
docs
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
host-modules
snapshot store: bound the transfer on both ends
2026-10-16 11:45:58 +02:00
module-eval
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
packages
reference-docs: build again with 40 workspace crates
2026-10-15 15:32:20 +02:00
script-tests
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
templates
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
checks.nix
module-eval: three duplicate nixosSystem fixtures come from shared.nix
2026-10-15 08:29:58 +02:00
devshell.nix
CI and devshell comments say what the config does: jobTimeout bounds jobs, coverage runs nightly, dead timeout keys removed
2026-10-15 08:27:32 +02:00
journald-severity.nix
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
reserved-hive-fragments.nix
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
reserved-names.nix
swarm-builder: scope the forge token to the forge, one build at a time, opt-in
2026-10-14 03:30:46 +02:00
rust.nix
add review classifier rules for this repo
2026-10-12 21:05:38 +02:00
sources.nix
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt.nix
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00