From 410ae87bf5e27aa37044c204b7add6bb18d364f3 Mon Sep 17 00:00:00 2001 From: lucasew Date: Fri, 5 Jul 2024 14:32:19 -0300 Subject: [PATCH 1/2] nixos/boinc: use exec to start the payload binary Signed-off-by: lucasew --- nixos/modules/services/computing/boinc/client.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/computing/boinc/client.nix b/nixos/modules/services/computing/boinc/client.nix index c2132149a3f5..b3ec033d5a84 100644 --- a/nixos/modules/services/computing/boinc/client.nix +++ b/nixos/modules/services/computing/boinc/client.nix @@ -98,7 +98,7 @@ in after = ["network.target"]; wantedBy = ["multi-user.target"]; script = '' - ${fhsEnvExecutable} --dir ${cfg.dataDir} ${allowRemoteGuiRpcFlag} + exec ${fhsEnvExecutable} --dir ${cfg.dataDir} ${allowRemoteGuiRpcFlag} ''; serviceConfig = { User = "boinc"; From 5d49d4cfa1a4ceb5cfaad343c436c2e9e48de913 Mon Sep 17 00:00:00 2001 From: lucasew Date: Wed, 20 Mar 2024 17:16:30 -0300 Subject: [PATCH 2/2] nixos/guix: use exec to start the payload binary Signed-off-by: lucasew --- nixos/modules/services/misc/guix/default.nix | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/nixos/modules/services/misc/guix/default.nix b/nixos/modules/services/misc/guix/default.nix index 7174ff36b709..4b853c7198cf 100644 --- a/nixos/modules/services/misc/guix/default.nix +++ b/nixos/modules/services/misc/guix/default.nix @@ -213,7 +213,7 @@ in systemd.services.guix-daemon = { environment = serviceEnv; script = '' - ${lib.getExe' package "guix-daemon"} \ + exec ${lib.getExe' package "guix-daemon"} \ --build-users-group=${cfg.group} \ ${lib.escapeShellArgs cfg.extraArgs} ''; @@ -324,7 +324,7 @@ in } ''; script = '' - ${lib.getExe' package "guix"} publish \ + exec ${lib.getExe' package "guix"} publish \ --user=${cfg.publish.user} --port=${builtins.toString cfg.publish.port} \ ${lib.escapeShellArgs cfg.publish.extraArgs} ''; @@ -380,12 +380,10 @@ in description = "Guix garbage collection"; startAt = cfg.gc.dates; script = '' - ${lib.getExe' package "guix"} gc ${lib.escapeShellArgs cfg.gc.extraArgs} + exec ${lib.getExe' package "guix"} gc ${lib.escapeShellArgs cfg.gc.extraArgs} ''; - serviceConfig = { Type = "oneshot"; - PrivateDevices = true; PrivateNetworks = true; ProtectControlGroups = true;