sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert "modules/darwin/hercules-ci: add security to service path"

Browse source 
This reverts commit 5da85a9b72.

Fixed in nix-darwin by 251eaabfa0
This commit is contained in:
zowoq 2024-05-22 08:25:57 +10:00
parent 66ab4f3a94
commit df589eed39
1 changed files with 1 additions and 10 deletions

11
modules/darwin/hercules-ci/default.nix
View file

@ -1,9 +1,4 @@
{ config, pkgs, ... }: { config, ... }:
let
securityWrapper = pkgs.writeScriptBin "security" ''
exec /usr/bin/security "$@"
'';
in
{ {
age.secrets.binary-caches = { age.secrets.binary-caches = {
file = ../../../secrets/binary-caches.age; file = ../../../secrets/binary-caches.age;
@ -25,8 +20,4 @@ in
binaryCachesPath = config.age.secrets.binary-caches.path; binaryCachesPath = config.age.secrets.binary-caches.path;
clusterJoinTokenPath = config.age.secrets.cluster-join-token.path; clusterJoinTokenPath = config.age.secrets.cluster-join-token.path;
}; };
# hercules-ci-agent: security: createProcess: posix_spawnp: does not exist
# https://github.com/LnL7/nix-darwin/blob/36524adc31566655f2f4d55ad6b875fb5c1a4083/modules/services/hercules-ci-agent/default.nix#L28
launchd.daemons.hercules-ci-agent.path = pkgs.lib.mkForce [ config.nix.package securityWrapper ];
} }