lament/pantheon

nothing was creating /home/lament #128

Merged

lament merged 1 commit from lament-home-tmpfiles into main

2026-08-27 02:58:48 -05:00

lament commented

2026-08-27 02:42:24 -05:00

Owner

ssh minerva has been greeting me with Could not chdir to home directory /home/lament: No such file or directory since the local accounts came out. sssd hands over the account, but nothing ever created the directory it points at, and /home isn't persisted - so there's nothing to survive a boot either.

systemd.tmpfiles.rules creates /home/lament on every host without a local account
- numeric 1000 1000 rather than names: tmpfiles runs well before sssd can resolve either
- skipped where localAccount already declares a home (verdandi)
while in there: modules.lament.standalone had no consumers left
- every host set it true, so home-manager.users.lament's mkIf (!cfg.standalone) branch was dead code
- option, branch, the five host toggles, and a now-unused optionals all dropped
- home-manager-root still rides the NixOS module, so core.nix's HM wiring stays
verdandi's local lament pinned to uid/gid 1000 to match what the directory serves
- it's the one host whose lament is a real local account that also answers to the LDAP password and GSSAPI - one identity, so both lookup paths should agree on the numbers
- users.groups.lament declared at 1000 alongside it; nsswitch shadows sssd's entry there, which is the point on the box that can't depend on its own directory

/home/lament on verdandi is currently gid 100 and empty, so the gid change is a no-op today - worth deploying that host before anything lands in it.

Does not touch the HM profile itself: the servers still get a bare shell, homeConfigurations."lament@server" remains unapplied. Separate problem, separate PR.

`ssh minerva` has been greeting me with `Could not chdir to home directory /home/lament: No such file or directory` since the local accounts came out. sssd hands over the account, but nothing ever created the directory it points at, and `/home` isn't persisted - so there's nothing to survive a boot either. - `systemd.tmpfiles.rules` creates `/home/lament` on every host without a local account - numeric `1000 1000` rather than names: tmpfiles runs well before sssd can resolve either - skipped where `localAccount` already declares a home (verdandi) - while in there: `modules.lament.standalone` had no consumers left - every host set it `true`, so `home-manager.users.lament`'s `mkIf (!cfg.standalone)` branch was dead code - option, branch, the five host toggles, and a now-unused `optionals` all dropped - `home-manager-root` still rides the NixOS module, so `core.nix`'s HM wiring stays - verdandi's local `lament` pinned to uid/gid 1000 to match what the directory serves - it's the one host whose `lament` is a real local account that also answers to the LDAP password and GSSAPI - one identity, so both lookup paths should agree on the numbers - `users.groups.lament` declared at 1000 alongside it; nsswitch shadows sssd's entry there, which is the point on the box that can't depend on its own directory `/home/lament` on verdandi is currently gid 100 and empty, so the gid change is a no-op today - worth deploying that host before anything lands in it. Does not touch the HM profile itself: the servers still get a bare shell, `homeConfigurations."lament@server"` remains unapplied. Separate problem, separate PR.

lament added 1 commit

2026-08-27 02:42:24 -05:00

create lament's home dir via tmpfiles, drop the dead standalone toggle

CI / check (pull_request) Successful in 52s

Details

CI / deploy (pull_request) Has been skipped

Details

CI / dry-activate (pull_request) Has been cancelled

Details

CI / build (pull_request) Has been cancelled

Details

abc7274bc9

sssd supplies the account but nothing created /home/lament, so every ssh to a
server landed in a missing cwd. lamentUser's integrated HM branch had no
consumers left - every host set standalone = true.

lament added the

fix

fleet

labels

2026-08-27 02:42:29 -05:00

lament changed target branch from vaultwarden-admin-token to main

2026-08-27 02:51:58 -05:00

lament force-pushed lament-home-tmpfiles from abc7274bc9

CI / check (pull_request) Successful in 52s

Details

CI / deploy (pull_request) Has been skipped

Details