Unverified Commit 44bbe5dd authored by Thiago Kenji Okada's avatar Thiago Kenji Okada Committed by GitHub
Browse files

nixos/{boinc,guix}: Use exec to start the payload binary of the service (#297526)

parents 8db0ec76 5d49d4cf

nixos/modules/services/computing/boinc/client.nix

+1 −1
Original line number Diff line number Diff line
@@ -95,7 +95,7 @@ in 
        after = ["network.target"];

        wantedBy = ["multi-user.target"];

        script = ''

          ${fhsEnvExecutable} --dir ${cfg.dataDir} ${allowRemoteGuiRpcFlag}

          exec ${fhsEnvExecutable} --dir ${cfg.dataDir} ${allowRemoteGuiRpcFlag}

        '';

        serviceConfig = {

          User = "boinc";

nixos/modules/services/misc/guix/default.nix

+3 −5
Original line number Diff line number Diff line
@@ -275,7 +275,7 @@ in 
      systemd.services.guix-daemon = {

        environment = serviceEnv;

        script = ''

          ${lib.getExe' package "guix-daemon"} \

          exec ${lib.getExe' package "guix-daemon"} \

            --build-users-group=${cfg.group} \

            ${lib.optionalString (cfg.substituters.urls != [ ])

              "--substitute-urls='${lib.concatStringsSep " " cfg.substituters.urls}'"} \
@@ -384,7 +384,7 @@ in 
            }

        '';

        script = ''

          ${lib.getExe' package "guix"} publish \

          exec ${lib.getExe' package "guix"} publish \

            --user=${cfg.publish.user} --port=${builtins.toString cfg.publish.port} \

            ${lib.escapeShellArgs cfg.publish.extraArgs}

        '';
@@ -440,12 +440,10 @@ in 
        description = "Guix garbage collection";

        startAt = cfg.gc.dates;

        script = ''

          ${lib.getExe' package "guix"} gc ${lib.escapeShellArgs cfg.gc.extraArgs}

          exec ${lib.getExe' package "guix"} gc ${lib.escapeShellArgs cfg.gc.extraArgs}

        '';



        serviceConfig = {

          Type = "oneshot";



          PrivateDevices = true;

          PrivateNetwork = true;

          ProtectControlGroups = true;