nixos

titaniumtown/nixos

Fork 0

Commit Graph

Author	SHA1	Message	Date
Simon Gardling	a228f61d34	systemd: patch freezer stuck-state on kill-while-frozen Reset u->freezer_state to FREEZER_RUNNING when a unit transitions to inactive/failed. Without this, any SIGKILL path to a frozen unit (systemctl kill, OOM, watchdog SIGABRT-then-KILL, segfault) leaves the unit stranded at FreezerState=frozen with no recovery short of a reboot. Complements upstream PR #38528 which covers only the watchdog path. xmrig-auto-pause never calls `systemctl freeze` itself (direct cgroup.freeze writes bypass the bug class entirely), so the patch is defensive: benefits systemd-homed on lock, user-session freezing on suspend, or anything else that may freeze units on muffin. Patching systemd cascades udev-check-hook hash changes into fuse3 --> e2fsprogs and into fish. Two test-suite workarounds ride along: drop e2fsprogs m_hugefile (4 GiB sparse file, fails on some build sandboxes) and fish doCheck=false (cargo pexpect TTY tests). Both are environmental, unrelated to the patch.	2026-04-21 23:52:36 -04:00
primary	1719d54ee0	phase 3: new flake.nix + extract common-{nix,doas,shell-fish}; rewire imports - New unified flake with two nixpkgs channels (unstable for desktops, 25.11 for muffin) - modules/common-{doas,shell-fish,nix}.nix extracted from duplicated blocks - modules/desktop-common.nix: renamed from system/common.nix; secret paths point to secrets/desktop/ - hosts/{mreow,yarn}/default.nix import desktop-common; yarn imports modules/no-rgb.nix - hosts/muffin/default.nix imports common-* + server-prefixed modules + services/; duplicate doas/fish/nix blocks removed; gc retention preserved as mkForce override - modules/age-secrets.nix: file paths → ../secrets/server/.age - services/{minecraft,matrix/livekit}: secret paths → ../secrets/server/ - home/profiles/.nix: ./progs/ → ../progs/ - hosts/{mreow,yarn}/home.nix: imports rewired to ../../home/profiles/ and ../../home/progs/ - home/progs/pi.nix and hosts/yarn/home.nix: secret reads → ../../secrets/home/ - tests/*.nix: ../modules/security.nix → ../modules/server-security.nix; ../modules/overlays.nix → ../lib/overlays.nix - lib/default.nix: takes explicit lib param (defaults to nixpkgs-stable.lib)	2026-04-18 00:58:55 -04:00

Author

SHA1

Message

Date

Simon Gardling

a228f61d34

systemd: patch freezer stuck-state on kill-while-frozen

Reset u->freezer_state to FREEZER_RUNNING when a unit transitions to
inactive/failed. Without this, any SIGKILL path to a frozen unit
(systemctl kill, OOM, watchdog SIGABRT-then-KILL, segfault) leaves
the unit stranded at FreezerState=frozen with no recovery short of
a reboot. Complements upstream PR #38528 which covers only the
watchdog path.

xmrig-auto-pause never calls `systemctl freeze` itself (direct
cgroup.freeze writes bypass the bug class entirely), so the patch
is defensive: benefits systemd-homed on lock, user-session freezing
on suspend, or anything else that may freeze units on muffin.

Patching systemd cascades udev-check-hook hash changes into fuse3 -->
e2fsprogs and into fish. Two test-suite workarounds ride along:
drop e2fsprogs m_hugefile (4 GiB sparse file, fails on some build
sandboxes) and fish doCheck=false (cargo pexpect TTY tests). Both
are environmental, unrelated to the patch.

2026-04-21 23:52:36 -04:00

primary

1719d54ee0

phase 3: new flake.nix + extract common-{nix,doas,shell-fish}; rewire imports

- New unified flake with two nixpkgs channels (unstable for desktops, 25.11 for muffin)
- modules/common-{doas,shell-fish,nix}.nix extracted from duplicated blocks
- modules/desktop-common.nix: renamed from system/common.nix; secret paths point to secrets/desktop/
- hosts/{mreow,yarn}/default.nix import desktop-common; yarn imports modules/no-rgb.nix
- hosts/muffin/default.nix imports common-* + server-prefixed modules + services/; duplicate doas/fish/nix blocks removed; gc retention preserved as mkForce override
- modules/age-secrets.nix: file paths → ../secrets/server/*.age
- services/{minecraft,matrix/livekit}: secret paths → ../secrets/server/
- home/profiles/*.nix: ./progs/ → ../progs/
- hosts/{mreow,yarn}/home.nix: imports rewired to ../../home/profiles/ and ../../home/progs/
- home/progs/pi.nix and hosts/yarn/home.nix: secret reads → ../../secrets/home/
- tests/*.nix: ../modules/security.nix → ../modules/server-security.nix; ../modules/overlays.nix → ../lib/overlays.nix
- lib/default.nix: takes explicit lib param (defaults to nixpkgs-stable.lib)

2026-04-18 00:58:55 -04:00

2 Commits