mirror of
https://github.com/Mic92/sops-nix.git
synced 2026-04-24 22:35:28 +08:00
When useSystemdActivation is enabled, sops-install-secrets.service runs ordered Before=sysinit-reactivation.target, which switch-to-configuration restarts *after* it has already consumed /run/nixos/activation-*-list. Writing to those files from the service therefore does nothing on the current switch and leaks into the next one. NixOS 26.05 also deprecates the activation-list mechanism, printing a warning whenever the files exist, with removal planned for 26.11. Detect systemd invocation via INVOCATION_ID and call systemctl directly (try-restart / try-reload-or-restart, --no-block to avoid deadlocking the sysinit transaction). The legacy activation-script path keeps writing the list files for backward compatibility. |
||
|---|---|---|
| .. | ||
| sops-import-keys-hook | ||
| sops-init-gpg-key | ||
| sops-install-secrets | ||
| sops-pgp-hook | ||
| cross-build.nix | ||
| lint.nix | ||
| sops-pgp-hook-test.nix | ||
| unit-tests.nix | ||