r-vdp 81440e3757 sops-install-secrets: call systemctl directly when run as a systemd unit ... When useSystemdActivation is enabled, sops-install-secrets.service runs ordered Before=sysinit-reactivation.target, which switch-to-configuration restarts *after* it has already consumed /run/nixos/activation-*-list. Writing to those files from the service therefore does nothing on the current switch and leaks into the next one. NixOS 26.05 also deprecates the activation-list mechanism, printing a warning whenever the files exist, with removal planned for 26.11. The systemd unit now sets SOPS_RESTART_UNITS_VIA_SYSTEMCTL=1 so the binary knows to call systemctl directly (try-restart / try-reload-or-restart, --no-block to avoid deadlocking the sysinit transaction). INVOCATION_ID cannot be used for this since switch-to-configuration is almost always invoked from a process tree rooted in some unit (sshd, getty, systemd-run), so the activation script inherits it too. The legacy activation-script path keeps writing the list files for backward compatibility. Closes #934		2026-06-03 20:11:00 +03:00
..
sops-import-keys-hook	Bump go to 1.25, remove compatibility for 25.05 or older	2026-02-04 20:08:04 +01:00
sops-init-gpg-key	reformat code base with nixfmt	2024-11-17 12:22:59 +01:00
sops-install-secrets	sops-install-secrets: call systemctl directly when run as a systemd unit	2026-06-03 20:11:00 +03:00
sops-pgp-hook	Resolve old TODO	2025-08-04 19:23:44 +02:00
cross-build.nix	move all nix expressions to pkgs	2022-05-15 08:19:33 +02:00
lint.nix	don't enable lint for old golang version	2025-04-02 16:27:00 +02:00
sops-pgp-hook-test.nix	vendorHash: make it overridable	2023-07-15 06:49:20 +00:00
unit-tests.nix	unit-test: convert to shell app	2026-01-10 08:53:08 +01:00