22 lines
2.5 KiB
Org Mode
22 lines
2.5 KiB
Org Mode
:PROPERTIES:
|
|
:ID: bf4dde56-0967-4374-94ed-771301e47c66
|
|
:END:
|
|
|
|
#+title: azos
|
|
#+filetags: :project: :knowledge:
|
|
|
|
- =azos-core= is a git submodule — =git add= must be run inside it separately from the outer repo
|
|
- Nix flakes only evaluate git-tracked files; new files must be staged (=git add=) before =nix build= will see them
|
|
- =import-tree= auto-discovers features but only sees tracked files — same constraint
|
|
- The machine name is =lauretta=; machine config is at =_machines/lauretta.nix=
|
|
- =postPatch= in Nix derivations: alejandra reformats indentation of multiline strings, which can change effective shell script content
|
|
- A systemd (user) unit's =Service.Environment = "PATH=...";= REPLACES the default PATH rather than appending to it — any bare command (e.g. =sleep=) in the associated script will 127 under that restricted PATH even though it works fine run manually from an interactive shell. Every command needs an absolute =${pkgs.X}/bin/...= reference, not just the ones the override was written for. Hit this in =features/nextcloud/default.nix= (see [[id:f4196b35-5438-4da3-9d34-511291f482b5][azos/nextcloud]]).
|
|
- Same =PATH= override gotcha has a second trap: several NixOS tools (=fusermount3=, =sudo=, etc.) only work from their *setuid-root* wrapper at =/run/wrappers/bin/=, not from the plain package's =/nix/store/.../bin/= (not setuid, lacks the needed capability). A restricted =PATH=... override must include =/run/wrappers/bin= or any FUSE/setuid-dependent command will fail with "Operation not permitted" (not 127 — a different failure mode, easy to misdiagnose as unrelated/environmental). See [[id:f4196b35-5438-4da3-9d34-511291f482b5][azos/nextcloud]] for the =fusermount3= instance of this.
|
|
|
|
** Subnodes
|
|
- [[id:b8094a02-528a-4eeb-a021-4ffc7396f0f3][azos/emacs]] — Emacs-specific gotchas (async-shell-command/pty, org-babel lexical binding)
|
|
- [[id:da416dd3-d7bb-4a81-83fb-a5543817b462][azos/mail]] — mu4e/mbsync/msmtp accounts, contexts, bookmarks
|
|
- [[id:b72d2db1-f539-40b9-ade4-1253415049e2][azos/hardware-auth]] — YubiKey U2F login/sudo setup; lauretta's fingerprint reader is unsupported, why, and what would unblock it
|
|
- [[id:939a9fa3-ddc8-4cc1-8130-771cc5de000f][azos/todos]] — open project TODOs
|
|
- [[id:1196aa79-76ba-4090-a896-6e4938338bd1][azos/dav]] — DAV (phone reminders) todo sync via vdirsyncer/todoman; recurring/alarm limitations
|
|
- [[id:f4196b35-5438-4da3-9d34-511291f482b5][azos/nextcloud]] — Nextcloud webdav mount via rclone, YubiKey-gated; the PATH-override crash-loop fix |