Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nixos/etcd: fixes etcd failing to start at boot and add openFirewall option #279268

Merged
merged 2 commits into from
Feb 4, 2024

Conversation

superherointj
Copy link
Contributor

@superherointj superherointj commented Jan 7, 2024

Fixes etcd failing to start at boot for network and firewall not being ready and etcd peers being unavailable because of network/firewall

  • configure etcd systemd unit to:

    • delay etcd start-up until network and firewall are ready
    • restart on failure and be always on
  • add openFirewall option

  • nixos/etcd: fix etcd category from misc to databases

@superherointj superherointj changed the title nixos/etcd: only start after firewall is ready nixos/etcd: wait for firewall/network-online to start Jan 7, 2024
@superherointj superherointj marked this pull request as draft January 14, 2024 02:24
@superherointj superherointj marked this pull request as ready for review January 15, 2024 19:19
@superherointj
Copy link
Contributor Author

ping maintainers of etcd: @offline @endocrimes

@superherointj superherointj marked this pull request as draft January 16, 2024 19:58
@superherointj superherointj force-pushed the etcd-fix-firewall-startup branch 2 times, most recently from 55b8210 to 3238f8c Compare January 16, 2024 21:38
@superherointj superherointj changed the title nixos/etcd: wait for firewall/network-online to start nixos/etcd: improve systemd unit and add openFirewall option Jan 16, 2024
@superherointj superherointj marked this pull request as ready for review January 16, 2024 21:44
@superherointj superherointj changed the title nixos/etcd: improve systemd unit and add openFirewall option nixos/etcd: fixes etcd failing to start at boot and add openFirewall option Jan 16, 2024
@superherointj superherointj marked this pull request as draft January 16, 2024 22:47
@superherointj superherointj marked this pull request as ready for review January 16, 2024 22:56
@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/prs-already-reviewed/2617/1398

Copy link
Member

@bryanasdev000 bryanasdev000 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Diff LGTM.

…option

Fixes etcd failing to start at boot for network and firewall not being ready and etcd peers being unavailable because of network/firewall

* configure etcd systemd unit to:

  - delay etcd start-up until network and firewall are ready
  - restart on failure and be always on

* add openFirewall option

  The official etcd ports are 2379 for client requests and 2380 for peer communication:
  https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
  https://etcd.io/docs/v3.4/op-guide/configuration/
@superherointj
Copy link
Contributor Author

@vcunat Would you review this? It's etcd module.

@vcunat
Copy link
Member

vcunat commented Feb 1, 2024

No, I'm afraid I've barely heard etcd mentioned, never used it.

@wegank wegank merged commit 7ece427 into NixOS:master Feb 4, 2024
20 checks passed
@superherointj
Copy link
Contributor Author

@wegank Thanks!

@superherointj superherointj deleted the etcd-fix-firewall-startup branch February 4, 2024 23:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants