imp: add preStart on mithril-verify to avoid secrets race

input-output-hk · Apr 16, 2024 · f2ab3e8 · f2ab3e8
1 parent ad539c3
commit f2ab3e8
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/flake/nixosModules/role-block-producer.nix b/flake/nixosModules/role-block-producer.nix
@@ -224,8 +224,16 @@ flake: {
               RELAY_ENDPOINT = mkIf mithrilCfg.useRelay "${mithrilCfg.relayEndpoint}:${toString mithrilCfg.relayPort}";
             };
 
+            preStart = ''
+              while ! [ -s /run/secrets/cardano-node-cold-verification ]; do
+                echo "Waiting 10 seconds for secret /run/secrets/cardano-node-cold-verification to become available..."
+                sleep 10
+              done
+            '';
+
             serviceConfig = {
               Type = "oneshot";
+
               ExecStart = getExe (pkgs.writeShellApplication {
                 name = "mithril-signer-verifier";
                 runtimeInputs = with pkgs; [cardano-cli curl gnugrep jq];