Skip to content

fix(pm-apps): point ready-for-agent tailnet proxy at the systemd package socket-proxyd (#1181) - #6453

Merged
dezren39 merged 1 commit into
mainfrom
fix/1181-tailnet-socket-proxyd-path
Nov 6, 2026
Merged

dezren39 merged 1 commit into
mainfrom
fix/1181-tailnet-socket-proxyd-path

Conversation

@dezren39

@dezren39 dezren39 commented Nov 6, 2026 •

Copy link
Copy Markdown
Member

Fixes the broken tailnet leg of #1181.

Problem

ready-for-agent-tailnet.service (the socket-activated proxy that serves ready-for-agent on the tailnet address 100.99.113.103:6056) had:

ExecStart = "/run/current-system/sw/bin/systemd-socket-proxyd 127.0.0.1:6056";

That path does not exist on this host (/run/current-system/sw/bin/ contains only virtproxyd), so the service died with 203/EXEC on the first real connection and start-limit-failed both units. The socket sat armed and looked healthy until anyone actually connected. Verified live 2026-11-06 (see the deploy-verification comment on #1181).

Fix

One line in nixos/services/pm-apps/default.nix: reference the binary from the systemd package actually deployed by this configuration —

ExecStart = "${config.systemd.package}/lib/systemd/systemd-socket-proxyd 127.0.0.1:6056";

(The module's args are { config, lib, ... } — no pkgs in scope — and config.systemd.package is the authoritative reference to the deployed systemd build.)

Verification

nix eval on this branch:

  • config.systemd.package → /nix/store/6qqq5prql4952z0wfm5ymjfr7cx4ab7z-systemd-262
  • home-manager.users.user.systemd.user.services.ready-for-agent-tailnet.Service.ExecStart → "/nix/store/6qqq5prql4952z0wfm5ymjfr7cx4ab7z-systemd-262/lib/systemd/systemd-socket-proxyd 127.0.0.1:6056"
  • That binary exists in the store (-r-xr-xr-x … systemd-socket-proxyd).

Post-merge: nixos-rebuild switch + the #1181 verification steps (real curl to 100.99.113.103:6056 must return 200) before #1181 closes.


Autofix with [code]smith
Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.

@dezren39
dezren39 requested a review from a team as a code owner November 6, 2026 06:15
@dezren39
dezren39 merged commit 50debbc into main Nov 6, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-06T06:16:49.391822Z 3bba80d PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@dezren39
dezren39 deleted the fix/1181-tailnet-socket-proxyd-path branch November 6, 2026 06:15
@coderabbitai

coderabbitai Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

Explain Change →

Caution

Review failed

The pull request is closed.

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant