Archived
beatzaplentyandClaude Sonnet 4.6
b8d21d78d9
- Filter non-attrset values from nfsShares in server.nix so the poolDatasets loop skips the new `options` string entry - Fix typo proxomoxLxcImages → proxmoxLxcImages in server.nix exports - Rename proxmoxPxeImages → pxebootImages in mount-pxe-images.nix and pxe-boot.nix to match the actual key in variables.nix Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
43 lines
1.8 KiB
Nix
43 lines
1.8 KiB
Nix
{ config, lib, vars, ... }:
|
|
|
|
let
|
|
# Use the same FQDN approach as docker/mount-data.nix — a bare hostname is
|
|
# unreliable: systemd-resolved only tries LLMNR for single-label names, and
|
|
# a global search domain causes it to skip the interface-scoped LAN DNS.
|
|
nfsServer = "${vars.nfsServerHost}.${vars.homeDomain}";
|
|
in
|
|
{
|
|
fileSystems.${vars.nfsShares.pxebootImages.mountpoint} = {
|
|
device = "${nfsServer}:${vars.storageRoot}/${vars.nfsShares.pxebootImages.subpath}";
|
|
fsType = "nfs";
|
|
options = [
|
|
"_netdev"
|
|
"noatime"
|
|
] ++ (if config.boot.isContainer
|
|
# NFSv4 requires rpc_pipefs (sunrpc filesystem), which Proxmox LXC
|
|
# containers block unless `features: mount=nfs` is set. Use NFSv3+nolock
|
|
# instead: no rpc_pipefs dependency at the protocol level, and rpcbind
|
|
# on the server handles port resolution without needing client-side
|
|
# sunrpc infrastructure. nofail keeps boot clean if server is unreachable.
|
|
then [ "nfsvers=3" "proto=tcp" "nolock" "nofail" ]
|
|
else [ "nfsvers=4.2" "x-systemd.automount" ]);
|
|
};
|
|
|
|
# NixOS pulls var-lib-nfs-rpc_pipefs.mount (the sunrpc filesystem) into
|
|
# nfs-client.target for any nfs fileSystems entry. In LXC containers the
|
|
# sunrpc mount is blocked by Proxmox's AppArmor profile, causing it to fail
|
|
# and the activation to report an error even though our mount uses nofail.
|
|
# Add ConditionVirtualization=!container via drop-in so systemd skips the
|
|
# unit entirely in containers (skip = inactive, not failed), which keeps
|
|
# nfs-client.target green and activation clean.
|
|
systemd.units = lib.mkIf config.boot.isContainer {
|
|
"var-lib-nfs-rpc_pipefs.mount" = {
|
|
overrideStrategy = "asDropin";
|
|
text = ''
|
|
[Unit]
|
|
ConditionVirtualization=!container
|
|
'';
|
|
};
|
|
};
|
|
}
|