flake.lock: Update

[github-actions]

Automated changes by the update-flake-lock GitHub Action.

Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/5ad85c82cc52264f4beddc934ba57f3789f28347?narHash=sha256-PAqwnsBSI9SVC2QugvQ3xeYCB0otOwCacB1ueQj2tgw%3D' (2026-03-19)
  → 'github:nix-community/disko/32f4236bfc141ae930b5ba2fb604f561fed5219d?narHash=sha256-gC9Cp5ibBmGD5awCA9z7xy6MW6iJufhazTYJOiGlCUI%3D' (2026-04-19)
• Updated input 'hercules-ci-effects':
    'github:hercules-ci/hercules-ci-effects/554f6ed448ca74c00aa2371cde901ae1e73005b9?narHash=sha256-neu7ixXHjV3LobVjOndkL97u%2B6UF6Yoh%2BCUnzX7kUBQ%3D' (2026-03-15)
  → 'github:hercules-ci/hercules-ci-effects/e2456ee419f9d75f8382e3d6c5af4690b316a5a8?narHash=sha256-wA%2BONiwbvQIy7ERJx/ruhV7y5xku6XKstXCII5bIbdI%3D' (2026-04-19)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/cef5cf82671e749ac87d69aadecbb75967e6f6c3?narHash=sha256-DgH5mveLoau20CuTnaU5RXZWgFQWn56onQ4Du2CqYoI%3D' (2026-04-05)
  → 'github:nix-community/nix-index-database/c43246d4e9e506178b69baed075d797ec2d873e2?narHash=sha256-oHVcvP2Ahhj1KUsEzp%2B2BQF55/r5VSa3QxdPdwE1p00%3D' (2026-04-22)
• Updated input 'nixpkgs':
    'git+https://github.com/qowoz/nixpkgs?ref=infra-nixos-unstable-small&rev=edb6f591e250ffef639b939174c13e7451ac0d71&shallow=1' (2026-04-08)
  → 'git+https://github.com/qowoz/nixpkgs?ref=infra-nixos-unstable-small&rev=5004aa1a68ffbcde3b1866e1a6f0e7606087ba2c&shallow=1' (2026-04-22)
• Updated input 'nur-update':
    'github:nix-community/nur-update/6c8ae427d53dfdeb1db8f3c3492fe0d79e5b5b40?narHash=sha256-Lni/4tf7mh%2BPPfY5t7u/vcHQtfwScPytvBlV7J55yU8%3D' (2026-03-30)
  → 'github:nix-community/nur-update/b9a6e918aa2c13968773973812b01e9e960a4e8a?narHash=sha256-HBusiw5y7z1EVtRDPs9XKCOwBn9SNcPDTTLiTS7Wklo%3D' (2026-04-13)
• Updated input 'quadlet-nix':
    'github:mirkolenz/quadlet-nix/a8e142e4c288102bd43312b3c2fa5e1c25666e99?narHash=sha256-zOlX35pTiVdintAf6CoyJEG3BS1nXjmi%2B94LUcEHD%2B4%3D' (2026-03-02)
  → 'github:mirkolenz/quadlet-nix/6587d7c90b8952bef0fbf3e9073e2024dbad0b66?narHash=sha256-69Q4l1XA3r2raSpjqU8GQ6lGkeUhmZLDJtV3s%2B3G9Nw%3D' (2026-04-16)
• Updated input 'sops-nix':
    'github:qowoz/sops-nix/54ac587a9cb4c4ca34f182aad16e7224473094b5?narHash=sha256-R02oXTTmJvzuwhvsj7QA%2BURy40gOKYfhSi5fHyF/aCY%3D' (2026-03-27)
  → 'github:qowoz/sops-nix/5c4052fb3d57df092f35415ab8885bd1119b2609?narHash=sha256-H/HT5XuqmZj6%2BZK0ABJEaoOLo8Vu61akx89BofhXtns%3D' (2026-04-11)
• Updated input 'srvos':
    'github:nix-community/srvos/64c9cc6a274dac7d08c4d53494ffa4acf906e287?narHash=sha256-cg19ipIlZaLYgs/5ZPFcDDuOcZlGzfprB5xS4x7bVM4%3D' (2026-04-06)
  → 'github:nix-community/srvos/4968d2a44c84edfc9a38a2494cc7f85ad2c7122b?narHash=sha256-K3tWnUj6FXaK95sBUajedutJrFVrOzYhvrQwQjJ0FbU%3D' (2026-04-20)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/75925962939880974e3ab417879daffcba36c4a3?narHash=sha256-2qYcPgzFhnQWchHo0SlqLHrXpux5i6ay6UHA%2Bv2iH4U%3D' (2026-04-02)
  → 'github:numtide/treefmt-nix/790751ff7fd3801feeaf96d7dc416a8d581265ba?narHash=sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0%3D' (2026-04-08)

Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened by a GitHub Action.

To run GitHub Actions workflows on this PR, close and re-open this pull request.

[zowoq]

seems to be broken on build04 (likely build05 as well), gets stuck with this error, had to get a kvm console and boot into previous generation.

efi stub warning: working around broken setvirtualaddressmap ()

Doesn't seem to be firmware or kernel, need to go through other changes in nixpkgs.

I'll continue working on this in the next couple of days.

Probably another couple of days, having issues with my internet connection.

[zowoq]

seems to be broken on build04 (likely build05 as well), gets stuck with this error, had to get a kvm console and boot into previous generation.

build04 is fixed by switching to systemd-boot (c403b9c), I'll merge this and do the same for build05.

Over the next few days I'll switch build01,build02,build03 to systemd-boot to fix #2179 (comment).

[zowoq]

systemd-tmpfiles-clean.service is failing on all build* hosts since this update was merged, for now I've silenced the alert.

Details

[zowoq@build02:~]$ SYSTEMD_LOG_LEVEL=debug systemd-tmpfiles --clean
Looking for configuration files in (higher priority first):
        /etc/tmpfiles.d
        /run/tmpfiles.d
        /usr/local/lib/tmpfiles.d
        /usr/lib/tmpfiles.d
        /nix/store/9rpism89x6lyjcwzzkp6kana25rs03nn-systemd-260.1/lib/tmpfiles.d
Reading config file "/etc/tmpfiles.d/00-nixos.conf"…
/etc/tmpfiles.d/00-nixos.conf:5: Ignoring entry D! "/nix/var/nix/builds" because --boot is not specified.
/etc/tmpfiles.d/00-nixos.conf:13: Ignoring entry D! "/tmp" because --boot is not specified.
/etc/tmpfiles.d/00-nixos.conf:17: Ignoring entry R! "/etc/group.lock" because --boot is not specified.
/etc/tmpfiles.d/00-nixos.conf:18: Ignoring entry R! "/etc/passwd.lock" because --boot is not specified.
/etc/tmpfiles.d/00-nixos.conf:19: Ignoring entry R! "/etc/shadow.lock" because --boot is not specified.
/etc/tmpfiles.d/00-nixos.conf:28: Ignoring entry R! "/nix/var/nix/gcroots/tmp" because --boot is not specified.
/etc/tmpfiles.d/00-nixos.conf:29: Ignoring entry R! "/nix/var/nix/temproots" because --boot is not specified.
Reading config file "/etc/tmpfiles.d/borgbackup-job-nixpkgs-update.conf"…
Reading config file "/etc/tmpfiles.d/home.conf"…
Reading config file "/etc/tmpfiles.d/journal-nocow.conf"…
Reading config file "/etc/tmpfiles.d/lastlog2-tmpfiles.conf"…
Reading config file "/etc/tmpfiles.d/lvm2.conf"…
Reading config file "/etc/tmpfiles.d/nix-daemon.conf"…
Reading config file "/etc/tmpfiles.d/portables.conf"…
Reading config file "/etc/tmpfiles.d/ssh-root-provision.conf"…
/etc/tmpfiles.d/ssh-root-provision.conf:3: Credential 'ssh.authorized_keys.root' not specified, skipping line.
Reading config file "/etc/tmpfiles.d/static-nodes-permissions.conf"…
Reading config file "/run/tmpfiles.d/static-nodes.conf"…
/run/tmpfiles.d/static-nodes.conf:1: Ignoring entry c! "/dev/autofs" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:2: Ignoring entry c! "/dev/fuse" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:3: Ignoring entry c! "/dev/cuse" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:4: Ignoring entry c! "/dev/btrfs-control" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:5: Ignoring entry c! "/dev/nvram" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:6: Ignoring entry c! "/dev/loop-control" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:8: Ignoring entry c! "/dev/net/tun" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:9: Ignoring entry c! "/dev/ppp" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:10: Ignoring entry c! "/dev/uinput" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:12: Ignoring entry c! "/dev/mapper/control" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:13: Ignoring entry c! "/dev/uhid" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:15: Ignoring entry c! "/dev/vfio/vfio" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:16: Ignoring entry c! "/dev/userio" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:17: Ignoring entry c! "/dev/vhci" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:18: Ignoring entry c! "/dev/vhost-net" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:19: Ignoring entry c! "/dev/vhost-vsock" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:21: Ignoring entry c! "/dev/snd/timer" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:23: Ignoring entry c! "/dev/snd/seq" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:24: Ignoring entry c! "/dev/rfkill" because --boot is not specified.
/run/tmpfiles.d/static-nodes.conf:25: Ignoring entry c! "/dev/zfs" because --boot is not specified.
Reading config file "/etc/tmpfiles.d/systemd-nologin.conf"…
/etc/tmpfiles.d/systemd-nologin.conf:10: Ignoring entry f+! "/run/nologin" because --boot is not specified.
Reading config file "/etc/tmpfiles.d/systemd-nspawn.conf"…
/etc/tmpfiles.d/systemd-nspawn.conf:22: Ignoring entry R! "/var/lib/machines/.#*" because --boot is not specified.
/etc/tmpfiles.d/systemd-nspawn.conf:23: Ignoring entry R! "/.#machine.*" because --boot is not specified.
Reading config file "/etc/tmpfiles.d/systemd-tmp.conf"…
/etc/tmpfiles.d/systemd-tmp.conf:17: Ignoring entry R! "/tmp/systemd-private-*" because --boot is not specified.
/etc/tmpfiles.d/systemd-tmp.conf:18: Ignoring entry R! "/var/tmp/systemd-private-*" because --boot is not specified.
/etc/tmpfiles.d/systemd-tmp.conf:23: Ignoring entry r! "/var/lib/systemd/coredump/.#*" because --boot is not specified.
Reading config file "/etc/tmpfiles.d/systemd.conf"…
/etc/tmpfiles.d/systemd.conf:11: Ignoring entry f+! "/run/utmp" because --boot is not specified.
Loaded shared library 'libacl.so.1' via dlopen().
Reading config file "/etc/tmpfiles.d/tmp.conf"…
Reading config file "/etc/tmpfiles.d/var.conf"…
Reading config file "/etc/tmpfiles.d/x11.conf"…
/etc/tmpfiles.d/x11.conf:12: Ignoring entry D! "/tmp/.X11-unix" because --boot is not specified.
/etc/tmpfiles.d/x11.conf:13: Ignoring entry D! "/tmp/.ICE-unix" because --boot is not specified.
/etc/tmpfiles.d/x11.conf:14: Ignoring entry D! "/tmp/.XIM-unix" because --boot is not specified.
/etc/tmpfiles.d/x11.conf:15: Ignoring entry D! "/tmp/.font-unix" because --boot is not specified.
/etc/tmpfiles.d/x11.conf:18: Ignoring entry r! "/tmp/.X[0-9]*-lock" because --boot is not specified.
Running clean action for entry f /var/log/telegraf/dummy
Failed to determine whether '/home/r-ryantm/.gitconfig' is below autofs, ignoring: Permission denied
Running clean action for entry L /home/r-ryantm/.gitconfig
Failed to determine whether '/home/r-ryantm/.ssh' is below autofs, ignoring: Permission denied
Running clean action for entry d /home/r-ryantm/.ssh
Failed to determine whether '/var/lib/nixpkgs-update/bin/nixpkgs-update' is below autofs, ignoring: Permission denied
Running clean action for entry L /var/lib/nixpkgs-update/bin/nixpkgs-update
Failed to determine whether '/var/lib/nixpkgs-update/bin' is below autofs, ignoring: Permission denied
Running clean action for entry d /var/lib/nixpkgs-update/bin
Running clean action for entry d /run/keys
Running clean action for entry d /run/lock/lvm
Running clean action for entry d /run/lock
Running clean action for entry d /var/db
Running clean action for entry L /var/lock
Running clean action for entry d /run/binfmt
Running clean action for entry D /var/empty
Running clean action for entry L /nix/var/nix/gcroots/current-system
Running clean action for entry L /nix/var/nix/gcroots/booted-system
Running clean action for entry d /nix/var/nix/gcroots
Running clean action for entry d /nix/var/nix/builds
Cannot open directory "/nix/var/nix/builds" with O_NOATIME: Operation not permitted
statx() does not support 'STATX_ATIME' mask (running on an old kernel?)
statx(/nix/var/nix/builds) failed: Protocol driver not attached
Running clean action for entry d /nix/var/nix/daemon-socket
Running clean action for entry d /nix/var
Failed to determine whether '/root/.cache/borg' is below autofs, ignoring: Permission denied
Running clean action for entry d /root/.cache/borg
Failed to determine whether '/root/.cache' is below autofs, ignoring: Permission denied
Running clean action for entry d /root/.cache
Failed to determine whether '/root/.config/borg' is below autofs, ignoring: Permission denied
Running clean action for entry d /root/.config/borg
Failed to determine whether '/root/.config' is below autofs, ignoring: Permission denied
Running clean action for entry d /root/.config
Running clean action for entry Q /home
Running clean action for entry q /srv
Running clean action for entry d /var/lib/lastlog
Running clean action for entry d /run/lvm
Running clean action for entry Q /var/lib/portables
Failed to determine whether '/root/.ssh' is below autofs, ignoring: Permission denied
Running clean action for entry d /root/.ssh
Running clean action for entry d /root
Running clean action for entry z /dev/net/tun
Running clean action for entry d /dev/net
Running clean action for entry d /dev/mapper
Running clean action for entry z /dev/vfio/vfio
Running clean action for entry d /dev/vfio
Running clean action for entry z /dev/snd/seq
Running clean action for entry z /dev/snd/timer
Running clean action for entry d /dev/snd
Running clean action for entry d /dev/snd
Running clean action for entry Q /var/lib/machines
Running clean action for entry L /run/systemd/io.systemd.NamespaceResource
Running clean action for entry L /run/systemd/io.systemd.MountFileSystem
Running clean action for entry d /run/user
Running clean action for entry d /run/systemd/ask-password
Running clean action for entry d /run/systemd/seats
Running clean action for entry d /run/systemd/sessions
Running clean action for entry d /run/systemd/users
Running clean action for entry d /run/systemd/machines
Running clean action for entry d /run/systemd/shutdown
Running clean action for entry d /run/systemd/dissect-root
Running clean action for entry A /run/log/journal/e99b024165bc44568b22f401bb67538d
Running clean action for entry Z /run/log/journal/e99b024165bc44568b22f401bb67538d
Running clean action for entry a /run/log/journal
Running clean action for entry z /run/log/journal
Running clean action for entry d /run/log
Running clean action for entry x /var/lib/systemd/coredump/.#core*.2cb55c5c3c834c70a4226e5350c93b1e*
Cannot open directory "/var/lib/systemd/coredump" with O_NOATIME: Operation not permitted
Running clean action for entry d /var/lib/systemd/coredump
Cannot open directory "/var/lib/systemd/coredump" with O_NOATIME: Operation not permitted
statx() does not support 'STATX_ATIME' mask (running on an old kernel?)
statx(/var/lib/systemd/coredump) failed: Protocol driver not attached
Running clean action for entry d /var/lib/systemd/ephemeral-trees
Cannot open directory "/var/lib/systemd/ephemeral-trees" with O_NOATIME: Operation not permitted
statx() does not support 'STATX_ATIME' mask (running on an old kernel?)
statx(/var/lib/systemd/ephemeral-trees) failed: Protocol driver not attached
Running clean action for entry d /var/lib/systemd
Running clean action for entry d /var/lib/private
Running clean action for entry d /var/log/private
Running clean action for entry d /var/cache/private
Running clean action for entry X /tmp/systemd-private-2cb55c5c3c834c70a4226e5350c93b1e-*/tmp
Cannot open directory "/tmp" with O_NOATIME: Operation not permitted
Running clean action for entry x /tmp/systemd-private-2cb55c5c3c834c70a4226e5350c93b1e-*
Cannot open directory "/tmp" with O_NOATIME: Operation not permitted
Running clean action for entry X /tmp/systemd-private-2cb55c5c3c834c70a4226e5350c93b1e-nginx.service-*/tmp/nginx_*
Cannot open directory "/tmp" with O_NOATIME: Operation not permitted
Running clean action for entry q /tmp
Cannot open directory "/tmp" with O_NOATIME: Operation not permitted
statx() does not support 'STATX_ATIME' mask (running on an old kernel?)
statx(/tmp) failed: Protocol driver not attached
Running clean action for entry X /var/tmp/systemd-private-2cb55c5c3c834c70a4226e5350c93b1e-*/tmp
Cannot open directory "/var/tmp" with O_NOATIME: Operation not permitted
Running clean action for entry x /var/tmp/systemd-private-2cb55c5c3c834c70a4226e5350c93b1e-*
Cannot open directory "/var/tmp" with O_NOATIME: Operation not permitted
Running clean action for entry q /var/tmp
Cannot open directory "/var/tmp" with O_NOATIME: Operation not permitted
statx() does not support 'STATX_ATIME' mask (running on an old kernel?)
statx(/var/tmp) failed: Protocol driver not attached
Running clean action for entry L /var/run
Failed to determine whether '/var/cache/nixpkgs-update/worker/nixpkgs-review' is below autofs, ignoring: Permission denied
Running clean action for entry e /var/cache/nixpkgs-update/worker/nixpkgs-review
Running clean action for entry d /var/cache
Running clean action for entry h /var/empty
Running clean action for entry h /var/log/journal/remote
Running clean action for entry a /var/log/journal/e99b024165bc44568b22f401bb67538d/system.journal
Running clean action for entry z /var/log/journal/e99b024165bc44568b22f401bb67538d/system.journal
Running clean action for entry a /var/log/journal/e99b024165bc44568b22f401bb67538d
Running clean action for entry h /var/log/journal/e99b024165bc44568b22f401bb67538d
Running clean action for entry z /var/log/journal/e99b024165bc44568b22f401bb67538d
Running clean action for entry a /var/log/journal
Running clean action for entry h /var/log/journal
Running clean action for entry z /var/log/journal
Running clean action for entry f /var/log/wtmp
Running clean action for entry f /var/log/btmp
Running clean action for entry f /var/log/lastlog
Running clean action for entry d /var/log
Running clean action for entry d /var/lib
Running clean action for entry d /var/spool
Running clean action for entry q /var
Running clean action for entry z /run/keys
Running clean action for entry r /lib64/ld-linux-x86-64.so.2
Running clean action for entry r /lib/ld-linux.so.2
Running clean action for entry z /dev/loop-control
Running clean action for entry z /dev/fuse
Running clean action for entry z /dev/kvm
Running clean action for entry z /dev/vhost-net
Running clean action for entry z /dev/vhost-vsock

Looks like the problem is from new systemd 260, seems there is a patch but it isn't in a release yet. I'll look at cherry picking to here.