aboutsummaryrefslogtreecommitdiff
path: root/gnu/services
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2020-09-29 11:45:55 +0200
committerLudovic Courtès <ludo@gnu.org>2020-09-29 21:56:27 +0200
commit59261a22f9819b1fdf797ffba17af17d385d6c92 (patch)
tree5c3d651303e22cf804ee3f56149c898ab5488b08 /gnu/services
parente352706ad39a4d14fe9601785bd2fa9d168ad05e (diff)
downloadguix-59261a22f9819b1fdf797ffba17af17d385d6c92.tar
guix-59261a22f9819b1fdf797ffba17af17d385d6c92.tar.gz
services: secret-service: Add initial client/server handshake.
This allows the client running on the host to know when it's actually connect to the server running in the guest. Failing that, the client would connect right away to QEMU and send secrets even though the server is not running yet in the guest, which is unreliable. * gnu/build/secret-service.scm (secret-service-send-secrets): Add #:handshake-timeout. Read from SOCK an initial message from the server. Return #f on error. (secret-service-receive-secrets): Send 'secret-service-server' message to the client. Close SOCK upon timeout. * gnu/services/virtualization.scm (hurd-vm-shepherd-service): 'start' method returns #f when 'secret-service-send-secrets' returns #f.
Diffstat (limited to 'gnu/services')
-rw-r--r--gnu/services/virtualization.scm11
1 files changed, 9 insertions, 2 deletions
diff --git a/gnu/services/virtualization.scm b/gnu/services/virtualization.scm
index 2410be450b..7e2f5a1490 100644
--- a/gnu/services/virtualization.scm
+++ b/gnu/services/virtualization.scm
@@ -982,8 +982,15 @@ is added to the OS specified in CONFIG."
(root #$(hurd-vm-configuration-secret-root config)))
(catch #t
(lambda _
- (secret-service-send-secrets port root)
- pid)
+ ;; XXX: 'secret-service-send-secrets' won't complete until
+ ;; the guest has booted and its secret service server is
+ ;; running, which could take 20+ seconds during which PID 1
+ ;; is stuck waiting.
+ (if (secret-service-send-secrets port root)
+ pid
+ (begin
+ (kill (- pid) SIGTERM)
+ #f)))
(lambda (key . args)
(kill (- pid) SIGTERM)
(apply throw key args)))))))