nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

beatzaplentyandClaude Sonnet 4.6 cf0d62696f fix(lxc-pxe-boot): make privileged so NFS mounts work

The kernel's NFS client (FS_USERNS_MOUNT not set) rejects NFS mounts
from inside any unprivileged container's user namespace with EPERM —
AppArmor's mount=nfs feature only whitelists the AppArmor layer; the
VFS-level rejection happens before AppArmor is consulted.

lxc-pxe-boot mounts server.sweet.home:/tank/pxe-boot/images at
/mnt/pxe-images so nginx can serve large ISOs without filling the
container's root disk. Same pattern as lxc-docker (already privileged
for the same reason since it also mounts several NFS shares).

Operator action required: VMID 103 must be recreated as a privileged
container (the UID mapping on disk differs between privileged and
unprivileged; changing it in-place with pct set is unsafe). Rebuild
the tarball and use create-proxmox-resource.sh to replace it.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-27 05:23:22 +10:00

beszel

Fix beszel-agent losing its hub-pairing fingerprint on every restart

2026-07-20 15:59:24 +10:00

boot

Resolve all statix and nixpkgs-fmt warnings repo-wide

2026-07-20 03:47:42 +10:00

build-types

Merge pull request 'fix(server): open mountd port 20048 so NFS clients can scan and mount' (#74 ) from worktree-fix-nfs-mountd-firewall into main

2026-07-26 17:57:40 +00:00

clan

feat(provision): Phase 2 — migrate SSH host keys to clan vars