mirror of
https://github.com/girlbossceo/conduwuit.git
synced 2025-04-16 14:54:33 +00:00
108 lines
3.9 KiB
Markdown
108 lines
3.9 KiB
Markdown
# conduwuit for NixOS
|
|
|
|
conduwuit can be acquired by Nix (or [Lix][lix]) from various places:
|
|
|
|
* The `flake.nix` at the root of the repo
|
|
* The `default.nix` at the root of the repo
|
|
* From conduwuit's binary cache
|
|
|
|
A community maintained NixOS package is available at [`conduwuit`](https://search.nixos.org/packages?channel=unstable&show=conduwuit&from=0&size=50&sort=relevance&type=packages&query=conduwuit)
|
|
|
|
### Binary cache
|
|
|
|
A binary cache for conduwuit that the CI/CD publishes to is available at the
|
|
following places (both are the same just different names):
|
|
|
|
```
|
|
https://attic.kennel.juneis.dog/conduit
|
|
conduit:eEKoUwlQGDdYmAI/Q/0slVlegqh/QmAvQd7HBSm21Wk=
|
|
|
|
https://attic.kennel.juneis.dog/conduwuit
|
|
conduwuit:BbycGUgTISsltcmH0qNjFR9dbrQNYgdIAcmViSGoVTE=
|
|
```
|
|
|
|
The binary caches were recreated some months ago due to attic issues. The old public
|
|
keys were:
|
|
|
|
```
|
|
conduit:Isq8FGyEC6FOXH6nD+BOeAA+bKp6X6UIbupSlGEPuOg=
|
|
conduwuit:lYPVh7o1hLu1idH4Xt2QHaRa49WRGSAqzcfFd94aOTw=
|
|
```
|
|
|
|
If needed, we have a binary cache on Cachix but it is only limited to 5GB:
|
|
|
|
```
|
|
https://conduwuit.cachix.org
|
|
conduwuit.cachix.org-1:MFRm6jcnfTf0jSAbmvLfhO3KBMt4px+1xaereWXp8Xg=
|
|
```
|
|
|
|
If specifying a Git remote URL in your flake, you can use any remotes that
|
|
are specified on the README (the mirrors), such as the GitHub: `github:girlbossceo/conduwuit`
|
|
|
|
### NixOS module
|
|
|
|
The `flake.nix` and `default.nix` do not currently provide a NixOS module (contributions
|
|
welcome!), so [`services.matrix-conduit`][module] from Nixpkgs can be used to configure
|
|
conduwuit.
|
|
|
|
### Conduit NixOS Config Module and SQLite
|
|
|
|
Beware! The [`services.matrix-conduit`][module] module defaults to SQLite as a database backend.
|
|
Conduwuit dropped SQLite support in favor of exclusively supporting the much faster RocksDB.
|
|
Make sure that you are using the RocksDB backend before migrating!
|
|
|
|
There is a [tool to migrate a Conduit SQLite database to
|
|
RocksDB](https://github.com/ShadowJonathan/conduit_toolbox/).
|
|
|
|
If you want to run the latest code, you should get conduwuit from the `flake.nix`
|
|
or `default.nix` and set [`services.matrix-conduit.package`][package]
|
|
appropriately to use conduwuit instead of Conduit.
|
|
|
|
### UNIX sockets
|
|
|
|
Due to the lack of a conduwuit NixOS module, when using the `services.matrix-conduit` module
|
|
a workaround like the one below is necessary to use UNIX sockets. This is because the UNIX
|
|
socket option does not exist in Conduit, and the module forcibly sets the `address` and
|
|
`port` config options.
|
|
|
|
```nix
|
|
options.services.matrix-conduit.settings = lib.mkOption {
|
|
apply = old: old // (
|
|
if (old.global ? "unix_socket_path")
|
|
then { global = builtins.removeAttrs old.global [ "address" "port" ]; }
|
|
else { }
|
|
);
|
|
};
|
|
|
|
```
|
|
|
|
Additionally, the [`matrix-conduit` systemd unit][systemd-unit] in the module does not allow
|
|
the `AF_UNIX` socket address family in their systemd unit's `RestrictAddressFamilies=` which
|
|
disallows the namespace from accessing or creating UNIX sockets and has to be enabled like so:
|
|
|
|
```nix
|
|
systemd.services.conduit.serviceConfig.RestrictAddressFamilies = [ "AF_UNIX" ];
|
|
```
|
|
|
|
Even though those workarounds are feasible a conduwuit NixOS configuration module, developed and
|
|
published by the community, would be appreciated.
|
|
|
|
### jemalloc and hardened profile
|
|
|
|
conduwuit uses jemalloc by default. This may interfere with the [`hardened.nix` profile][hardened.nix]
|
|
due to them using `scudo` by default. You must either disable/hide `scudo` from conduwuit, or
|
|
disable jemalloc like so:
|
|
|
|
```nix
|
|
let
|
|
conduwuit = pkgs.unstable.conduwuit.override {
|
|
enableJemalloc = false;
|
|
};
|
|
in
|
|
```
|
|
|
|
[lix]: https://lix.systems/
|
|
[module]: https://search.nixos.org/options?channel=unstable&query=services.matrix-conduit
|
|
[package]: https://search.nixos.org/options?channel=unstable&query=services.matrix-conduit.package
|
|
[hardened.nix]: https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/profiles/hardened.nix#L22
|
|
[systemd-unit]: https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/matrix/conduit.nix#L132
|