lytedev/nix
1
0
Fork 1
Code Pull requests 2 Activity Actions

fix(fennec): complete syncthing provisioning (missed in #790) #797

Merged
lytedev merged 1 commit from fennec-syncthing-provision into main 2026-07-21 10:19:07 -05:00
Conversation 2 Commits 1 Files changed 2 +47 -28
lytedev commented 2026-07-19 10:54:41 -05:00
Owner
Copy link

VM install test of #790/#796 caught this: secrets/workstations/syncthing.yml (the syncthing GUI password) was never rekeyed for fennec — and one undecryptable sops file makes sops-install-secrets abort entirely, so NO secrets landed on first boot and syncthing crash-looped. Rekeyed (incidentally also adds thinker, which was missing from this file), and fennec's pre-generated device ID is registered in the shared module's allDeviceIDs. Re-validating in the VM now.

🤖 Generated with Claude Code

https://claude.ai/code/session_015yzzxRtnuvnRhA1Jt7Xsie

VM install test of #790/#796 caught this: secrets/workstations/syncthing.yml (the syncthing GUI password) was never rekeyed for fennec — and one undecryptable sops file makes sops-install-secrets abort entirely, so NO secrets landed on first boot and syncthing crash-looped. Rekeyed (incidentally also adds thinker, which was missing from this file), and fennec's pre-generated device ID is registered in the shared module's allDeviceIDs. Re-validating in the VM now. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_015yzzxRtnuvnRhA1Jt7Xsie
fix(fennec): complete syncthing provisioning (missed in #790)
All checks were successful
/ check-format (push) Successful in 10s
Details
/ build (push) Successful in 5m55s
Details
9ace2a0c3c 
The VM install test caught two gaps that broke syncthing (and, via
sops-nix's all-or-nothing secret install, ALL of /run/secrets) on first
boot:

- secrets/workstations/syncthing.yml was never rekeyed for fennec — only
  secrets/workstations/secrets.yml was. One undecryptable sops file
  aborts the whole sops-install-secrets run, so no secrets landed at
  all. Rekeyed (this also picked up thinker, which was missing too).
- Register fennec's pre-generated syncthing device ID in the shared
  module's allDeviceIDs so the fleet gets mutual discovery.
lytedev commented 2026-07-19 11:22:53 -05:00
Author
Owner
Copy link

Validated in the same VM run: with this rekey the sops-install-secrets pass succeeds, /run/secrets populates, and syncthing comes up active with the GUI password set. 0 failed units on first boot.

Validated in the same VM run: with this rekey the sops-install-secrets pass succeeds, /run/secrets populates, and syncthing comes up active with the GUI password set. 0 failed units on first boot.
lytedev commented 2026-07-19 11:23:18 -05:00
Author
Owner
Copy link

Validated in the same VM run: with this rekey sops-install-secrets succeeds, /run/secrets populates, syncthing comes up active with GUI password set. 0 failed units on first boot.

Validated in the same VM run: with this rekey sops-install-secrets succeeds, /run/secrets populates, syncthing comes up active with GUI password set. 0 failed units on first boot.
lytedev deleted branch fennec-syncthing-provision 2026-07-21 10:19:08 -05:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something is wrong

  
enhancement
New feature

  
question
Awaiting information

  
scary
Potentially problematic change

  
upstream
Awaiting upstream changes

No labels
bug
enhancement
question
scary
upstream
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lytedev/nix!797
No description provided.