sops-nix/pkgs/sops-install-secrets
r-vdp 6f5fe8036b
sops-install-secrets: call systemctl directly when run as a systemd unit
When useSystemdActivation is enabled, sops-install-secrets.service runs
ordered Before=sysinit-reactivation.target, which switch-to-configuration
restarts *after* it has already consumed /run/nixos/activation-*-list.
Writing to those files from the service therefore does nothing on the
current switch and leaks into the next one.

NixOS 26.05 also deprecates the activation-list mechanism, printing a
warning whenever the files exist, with removal planned for 26.11.

Detect systemd invocation via INVOCATION_ID and call systemctl directly
(try-restart / try-reload-or-restart, --no-block to avoid deadlocking
the sysinit transaction). The legacy activation-script path keeps
writing the list files for backward compatibility.
2026-03-30 15:49:09 +02:00
..
sshkeys Lint fixes (#539) 2024-04-18 16:19:26 +02:00
test-assets format type: add dotenv and ini 2023-01-17 10:55:52 -03:00
.envrc first commit 2020-07-06 07:31:57 +01:00
darwin.go Bump go to 1.25, remove compatibility for 25.05 or older 2026-02-04 20:08:04 +01:00
default.nix Bump go to 1.25, remove compatibility for 25.05 or older 2026-02-04 20:08:04 +01:00
linux.go Bump go to 1.25, remove compatibility for 25.05 or older 2026-02-04 20:08:04 +01:00
main.go sops-install-secrets: call systemctl directly when run as a systemd unit 2026-03-30 15:49:09 +02:00
main_test.go Bump go to 1.25, remove compatibility for 25.05 or older 2026-02-04 20:08:04 +01:00
shell.nix reformat code base with nixfmt 2024-11-17 12:22:59 +01:00