Extract auto-update implementation into an in-repository package and thin module

nimmo commented

2026-07-16 13:52:04 +01:00

Owner

Context

The auto-update implementation has grown into a small operational subsystem with two commands, deterministic runtime dependencies, locking, detached activation, recovery state, notifications, and a dedicated regression suite. This first extraction remains inside nixos-config and establishes the package/module boundary before any external repository is considered.

Delivered

Created the in-repository nixos-auto-update package, including both public commands, shared logic, deterministic runtime dependencies, and regression coverage.
Reduced modules/services/nixos-auto-update.nix to policy, systemd, host-specific nixos-rebuild wiring, SOPS notifications, and configured command wrappers.
Preserved generated build targets, command names, hold semantics, paths, journal unit names, failure stamps, and notifications.
Updated documentation and Forgejo workflow coverage.
Made nix flake check, including the NixOS VM gate, mandatory for pull requests.

Validation evidence

Implemented through !62; manual CLI compatibility and mandatory PR Nix/VM validation were restored through !63.
ShellCheck, actionlint, updater regressions, and nix flake check passed locally. Forgejo PR run 330 passed with the mandatory Nix/VM gate.
Electra completed a genuine detached update to 370bb6c84a30f7ec5499eb6d9d11b26de64a879e, verified by its helper while retaining the igpu tier.
The immediate clean follow-up succeeded: Nothing changed in pull, system is current (HEAD=370bb6c84a30f7ec5499eb6d9d11b26de64a879e).
Electra, Vega, and Lyra evaluated with the extracted package. Reverting to the pre-extraction commit remains straightforward.

## Context The auto-update implementation has grown into a small operational subsystem with two commands, deterministic runtime dependencies, locking, detached activation, recovery state, notifications, and a dedicated regression suite. This first extraction remains inside `nixos-config` and establishes the package/module boundary before any external repository is considered. ## Delivered - [x] Created the in-repository `nixos-auto-update` package, including both public commands, shared logic, deterministic runtime dependencies, and regression coverage. - [x] Reduced `modules/services/nixos-auto-update.nix` to policy, systemd, host-specific `nixos-rebuild` wiring, SOPS notifications, and configured command wrappers. - [x] Preserved generated build targets, command names, hold semantics, paths, journal unit names, failure stamps, and notifications. - [x] Updated documentation and Forgejo workflow coverage. - [x] Made `nix flake check`, including the NixOS VM gate, mandatory for pull requests. ## Validation evidence - Implemented through [!62](https://git.nimmog.uk/nimmo/nixos-config/pulls/62); manual CLI compatibility and mandatory PR Nix/VM validation were restored through [!63](https://git.nimmog.uk/nimmo/nixos-config/pulls/63). - ShellCheck, actionlint, updater regressions, and `nix flake check` passed locally. Forgejo PR run 330 passed with the mandatory Nix/VM gate. - Electra completed a genuine detached update to `370bb6c84a30f7ec5499eb6d9d11b26de64a879e`, verified by its helper while retaining the `igpu` tier. - The immediate clean follow-up succeeded: `Nothing changed in pull, system is current (HEAD=370bb6c84a30f7ec5499eb6d9d11b26de64a879e)`. - Electra, Vega, and Lyra evaluated with the extracted package. Reverting to the pre-extraction commit remains straightforward.

nimmo added this to the Automated Update Reliability Review milestone

2026-07-16 13:52:04 +01:00

nimmo added the

host:fleet

project:auto-update-reliability

service:auto-update

phase:packaging

labels

2026-07-16 13:52:04 +01:00

nimmo referenced this issue

2026-07-16 13:52:22 +01:00

Publish auto-update package and NixOS module as a standalone flake #61

nimmo commented

2026-07-16 13:52:32 +01:00

Author

Owner

Follow-up created as #61. Externalisation is explicitly blocked until this in-repository extraction has passed its live genuine-update and no-op validation.

nimmo referenced this issue

2026-07-17 13:49:00 +01:00

refactor: package NixOS auto-update #62

nimmo referenced this issue

2026-07-17 14:44:13 +01:00

fix: configure manual auto-update command #63

nimmo closed this issue

2026-07-17 14:51:02 +01:00

nimmo referenced this issue

2026-07-17 15:02:25 +01:00

Codify risk-based change and deployment workflow #64