mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:46 +01:00
Merge pull request #363 from ryan4yin/fix/smartctl-exporter-describe-descriptors
chore(workarounds): add a registry; pin smartctl_exporter to the #329 fix
This commit is contained in:
4 files changed
+101
No files matched your search
@@ -59,6 +59,12 @@ deployments. Keep repository guidance here; reusable global rules live in `agent
|
||||
- Use `lib.mkDefault` for defaults and `lib.mkForce` only when necessary.
|
||||
- Give module options a `description` and preserve platform-specific conditions.
|
||||
|
||||
## Workarounds
|
||||
|
||||
Temporary workarounds, version pins, carried patches, and known gaps are recorded in
|
||||
[WORKAROUNDS.md](./WORKAROUNDS.md), each with a removal condition. Add a row in the same change that
|
||||
introduces one, and re-evaluate entries when their `Revisit` trigger comes up.
|
||||
|
||||
## Command Hazards
|
||||
|
||||
- `just eval-host <host>`, `just build-host <host>`, `just build-microvm <guest>`, and `just test`
|
||||
@@ -120,6 +126,7 @@ repository, and cross-link them — no need to be told.
|
||||
## Further Context
|
||||
|
||||
- [Repository overview](./README.md)
|
||||
- [Workarounds & known gaps](./WORKAROUNDS.md)
|
||||
- [Outputs and tests](./outputs/README.md)
|
||||
- [Hosts](./hosts/README.md), [system modules](./modules/README.md), and
|
||||
[Home Manager](./home/README.md)
|
||||
|
||||
@@ -0,0 +1,66 @@
|
||||
# Workarounds & known gaps
|
||||
|
||||
Temporary workarounds, version pins, carried patches, and known gaps are collected here, grouped by
|
||||
type, each with the condition under which it can be removed. Review the list periodically so
|
||||
obsolete workarounds get rolled back instead of lingering.
|
||||
|
||||
## How to use
|
||||
|
||||
- **Adding** — a change that introduces a workaround, pin, carried patch, or known gap adds a row
|
||||
under the matching section below in the same PR, with a concrete **removal condition**.
|
||||
- **Removing** — once the removal condition is met, delete the change and set `Status` to `removed`
|
||||
(mention the ID in the commit), or delete the row.
|
||||
- **Reviewing** — re-evaluate rows whose `Revisit` trigger is due and refresh `Status`.
|
||||
|
||||
## Pins
|
||||
|
||||
A version or revision pinned for a reason that can go away.
|
||||
|
||||
| ID | What & where | Why | Removal condition | Added | Revisit | Status |
|
||||
| ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | ---------- | ---------------------- | ------ |
|
||||
| WA-001 | smartctl_exporter pinned to upstream `6274decc`, which carries PR [#329](https://github.com/prometheus-community/smartctl_exporter/pull/329) — `overlays/smartctl-exporter/` | `/metrics` returns HTTP 500 once a device becomes readable after startup ([#305](https://github.com/prometheus-community/smartctl_exporter/issues/305), [#326](https://github.com/prometheus-community/smartctl_exporter/issues/326)) | Drop once nixpkgs provides a version containing the #329 fix | 2026-10-03 | next nixpkgs bump | active |
|
||||
| WA-002 | `nixpkgs-2505` — `flake.nix`; consumer `home/base/tui/container.nix` | `kubernetes-helm` regressed in newer nixpkgs | Drop the input and its consumer once helm works again in current nixpkgs | 2025-12-03 | when helm is revisited | active |
|
||||
| WA-003 | `rust-overlay` follow — `flake.nix` | lanzaboote v1.1.0's pinned rust-overlay uses the deprecated `stdenv.isLinux`/`stdenv.isDarwin` | Drop the follow once lanzaboote updates its pin (or we drop the lanzaboote pin) | 2026-09-25 | on lanzaboote bump | active |
|
||||
| WA-004 | `catppuccin` on `main` — `flake.nix` | `main` carries the nodejs→nodejs-slim deprecation fix, which is not in a release | Switch to a release tag once it includes the fix | 2026-09-25 | on catppuccin release | active |
|
||||
| WA-005 | `tuios` input — `flake.nix`; `home/base/tui/tuios/` | nixpkgs lags behind upstream | Use nixpkgs' `tuios` once it is recent enough | 2026-10-03 | on nixpkgs bump | active |
|
||||
| WA-006 | `nixpkgs-blender` — `flake.nix` | Blender 5.2 LTS + CUDA/OptiX pin; keeps `just up` from triggering a full source rebuild | Bump deliberately when needed; drop the pin if the current nixpkgs build is acceptable | 2026-07-24 | deliberate | active |
|
||||
| WA-007 | WeChat from `nixpkgs-master` — `hardening/bwraps/default.nix` | newest builds; the pinned channel lags | Fall back to the stable channel once it has a good build | 2026-10-03 | on nixpkgs bump | active |
|
||||
|
||||
## Workarounds
|
||||
|
||||
A setting that works around a bug or a hardware quirk.
|
||||
|
||||
| ID | What & where | Why | Removal condition | Added | Revisit | Status |
|
||||
| ------ | ------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------- | ---------- | ------------------------------------------- | ------ |
|
||||
| WA-008 | Relaxed NVMe APST (`nvme_core.default_ps_max_latency_us=100000`) — `hosts/idols-ai/hardware-configuration.nix` | the KINGBANK KP260 (DRAM-less QLC) froze on slow APST wake-ups | Drop the override once kernel/firmware fixes or replacement hardware make default APST reliable | 2026-10-03 | watch NVMe timeout/reset/AER in the journal | active |
|
||||
| WA-009 | USB-SATA bridge mitigations (`usbcore.autosuspend=-1`, `usb-storage.delay_use=10`) — `hosts/12kingdoms-youko/default.nix` | flaky JMicron JMS567 resets with UDMA-CRC and I/O errors | Drop once the bridge/controller is replaced; the signal is smartctl CRC/media errors | 2026-09-21 | on hardware change or CRC errors | active |
|
||||
| WA-010 | Insta360 Link USB reset on S3 resume — `hosts/idols-ai/default.nix` | the camera stays enumerated with a stalled UVC endpoint after resume | Drop after the Insta360 firmware or the kernel `uvcvideo` fixes it | 2026-08-01 | on kernel or firmware change | active |
|
||||
| WA-011 | Kernel module blacklist (`esp4`, `esp6`, `rxrpc`) — `modules/nixos/base/kernel-hardening.nix` | attack surface for the Dirty Frag LPE (CVE-2026-43284 / CVE-2026-43500) | Kept as defence in depth; drop only if something needs those modules | 2026-10-03 | rarely | active |
|
||||
|
||||
If WA-008 freezes recur, the fallback is to restore
|
||||
`nvme_core.default_ps_max_latency_us=0 nvme_core.io_timeout=4294967295 pcie_aspm=off`; this is a
|
||||
recovery procedure, not its removal condition.
|
||||
|
||||
## Known issues
|
||||
|
||||
A known limitation with no fix yet.
|
||||
|
||||
| ID | What & where | Why | Removal condition | Added | Revisit | Status |
|
||||
| ------ | ---------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------- | ----- | -------------------------------------- | ------ |
|
||||
| WA-012 | `muvm` (x86_64 apps/games via microVM) disabled — `hosts/12kingdoms-shoukei/apple-silicon.nix` | Apple Silicon's 16k page size means x86_64 apps need `muvm`; it is off because it does not build/run on nixos-apple-silicon yet ([nixos-apple-silicon#237](https://github.com/nix-community/nixos-apple-silicon/issues/237)) | Re-enable once `muvm` builds and works | — | on nixos-apple-silicon or muvm updates | active |
|
||||
|
||||
## WIP
|
||||
|
||||
An unfinished feature or gap.
|
||||
|
||||
| ID | What & where | Why | Removal condition | Added | Revisit | Status |
|
||||
| ------ | --------------------------------- | -------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------- | ---------- | --------- | ------ |
|
||||
| WA-013 | NixOS tests — `outputs/README.md` | tests rebuild custom packages (no private cache) and hosts need their own ssh host key to decrypt agenix | Resolve when a private cache exists and tests can run per-service | 2024-03-13 | quarterly | active |
|
||||
|
||||
## Related
|
||||
|
||||
- Unmerged **nixpkgs** PRs are carried via the `nixpkgs-patched` input and the
|
||||
[`.agents/skills/nixpkgs-patched`](./.agents/skills/nixpkgs-patched/SKILL.md) workflow (that input
|
||||
currently carries nothing; package-level carries are recorded under `Pins`).
|
||||
- Routine version pins (colmena, agenix, disko, lanzaboote, haumea, home-manager, `nixpkgs-stable`,
|
||||
`nixpkgs-darwin`, …) are the versions in use, not workarounds, so they are not listed here.
|
||||
@@ -13,6 +13,8 @@ overlays/
|
||||
├── default.nix # Entrypoint for all overlays
|
||||
├── computer-use-linux.nix # trycua/computer-use-linux package
|
||||
├── cua-driver.nix # trycua/cua driver (cua-driver) package
|
||||
├── smartctl-exporter/ # smartctl_exporter pinned to the #329 fix
|
||||
│ └── default.nix
|
||||
└── fcitx5/ # Chinese input method configuration
|
||||
├── README.md
|
||||
├── default.nix # fcitx5 overlay definition
|
||||
@@ -55,3 +57,6 @@ This overlay provides:
|
||||
|
||||
- `computer-use-linux.nix`: packages `pkgs/computer-use-linux`.
|
||||
- `cua-driver.nix`: packages `pkgs/cua-driver` (used by the computer-use VMs).
|
||||
- `smartctl-exporter/`: pins `prometheus-smartctl-exporter` to the upstream commit carrying PR
|
||||
[#329](https://github.com/prometheus-community/smartctl_exporter/pull/329) until nixpkgs provides
|
||||
a version containing the fix; see `overlays/smartctl-exporter/default.nix`.
|
||||
@@ -0,0 +1,23 @@
|
||||
# smartctl_exporter 0.14.0 derives `Describe()` from the devices it can read at
|
||||
# startup, so when a device only becomes readable later (an NVMe whose ACL
|
||||
# arrives late, or an HDD waking from standby) `Collect()` emits metrics whose
|
||||
# descriptors were never registered and `/metrics` returns HTTP 500, failing the
|
||||
# whole scrape and hiding even the healthy disks.
|
||||
#
|
||||
# Pin the package to the upstream commit that carries the fix (PR #329, merged
|
||||
# 2026-09-28, then included in the "Update Go (#391)" commit below) instead of
|
||||
# backporting it as a patch. Drop this overlay once nixpkgs provides a version
|
||||
# containing the #329 fix:
|
||||
# https://github.com/prometheus-community/smartctl_exporter/pull/329
|
||||
_: _final: prev: {
|
||||
prometheus-smartctl-exporter = prev.prometheus-smartctl-exporter.overrideAttrs (_prev: {
|
||||
version = "0.14.0-unstable-2026-09-28";
|
||||
src = prev.fetchFromGitHub {
|
||||
owner = "prometheus-community";
|
||||
repo = "smartctl_exporter";
|
||||
rev = "6274decc61212cc61e58796cc3b8cf5cfa035809";
|
||||
hash = "sha256-KR+j4uLqxVtRpQ7L8UxOypOHZG9CxUGw0ELIO7e6tXc=";
|
||||
};
|
||||
vendorHash = "sha256-PJiMYWdoQ3Zk7sYHveG9uIgOjllgPuu6RjAPVdKUi6Y=";
|
||||
});
|
||||
}
|
||||
Reference in new issue
Block a user