feat(base): cap systemd-coredump retention at 7d fleet-wide #56

Open
hermes wants to merge 1 commit from hermes/coredump-retention into main AGit
Contributor

Upstream's tmpfiles entry keeps cores for 2w, which is too generous for
a crash loop: the journal-upload watchdog regression (PR#48) left 780
files / 166 MiB on hermes within a day, and amd, mx and halo a few
hundred each. Set the age to 7d via systemd.tmpfiles.rules in the base
module (every NixOS host; verified via nix eval on all nine). The rule
lands in 00-nixos.conf, whose entry wins over systemd.conf's 2w
per tmpfiles.d filename precedence (verified against live tmpfiles:
threshold now-7d, upstream line reported as duplicate and ignored).

Replaces manual cleanup on hosts the agent cannot reach (kanban
t_e80e60fa comment).

Upstream's tmpfiles entry keeps cores for 2w, which is too generous for a crash loop: the journal-upload watchdog regression (PR#48) left 780 files / 166 MiB on hermes within a day, and amd, mx and halo a few hundred each. Set the age to 7d via systemd.tmpfiles.rules in the base module (every NixOS host; verified via nix eval on all nine). The rule lands in 00-nixos.conf, whose entry wins over systemd.conf's 2w per tmpfiles.d filename precedence (verified against live tmpfiles: threshold now-7d, upstream line reported as duplicate and ignored). Replaces manual cleanup on hosts the agent cannot reach (kanban t_e80e60fa comment).
feat(base): cap systemd-coredump retention at 7d fleet-wide
All checks were successful
nix flake check / flake-check (pull_request) Successful in 4m23s
74957fbd15
Upstream's tmpfiles entry keeps cores for 2w, which is too generous for
a crash loop: the journal-upload watchdog regression (PR#48) left 780
files / 166 MiB on hermes within a day, and amd, mx and halo a few
hundred each. Set the age to 7d via systemd.tmpfiles.rules in the base
module (every NixOS host; verified via nix eval on all nine). The rule
lands in 00-nixos.conf, whose entry wins over systemd.conf's 2w
per tmpfiles.d filename precedence (verified against live tmpfiles:
threshold now-7d, upstream line reported as duplicate and ignored).

Replaces manual cleanup on hosts the agent cannot reach (kanban
t_e80e60fa comment).
All checks were successful
nix flake check / flake-check (pull_request) Successful in 4m23s
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin +refs/pull/56/head:hermes/coredump-retention
git switch hermes/coredump-retention
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
harald/nixcfg!56
No description provided.