mirror of
https://github.com/Mic92/sops-nix.git
synced 2026-07-17 06:25:16 +08:00
81440e3757
When useSystemdActivation is enabled, sops-install-secrets.service runs ordered Before=sysinit-reactivation.target, which switch-to-configuration restarts *after* it has already consumed /run/nixos/activation-*-list. Writing to those files from the service therefore does nothing on the current switch and leaks into the next one. NixOS 26.05 also deprecates the activation-list mechanism, printing a warning whenever the files exist, with removal planned for 26.11. The systemd unit now sets SOPS_RESTART_UNITS_VIA_SYSTEMCTL=1 so the binary knows to call systemctl directly (try-restart / try-reload-or-restart, --no-block to avoid deadlocking the sysinit transaction). INVOCATION_ID cannot be used for this since switch-to-configuration is almost always invoked from a process tree rooted in some unit (sshd, getty, systemd-run), so the activation script inherits it too. The legacy activation-script path keeps writing the list files for backward compatibility. Closes #934 |
||
|---|---|---|
| .. | ||
| secrets-for-users | ||
| templates | ||
| default.nix | ||
| manifest-for.nix | ||
| with-environment.nix | ||