guixsd-config

commit c96b66016db223de8b6735ce9d300c48838badae
parent 6470816944a6f08ad8d2c73c1d4b9b6fef48d911
Author: Vineet Kumar <git@vineetk.net>
Date:   Mon, 23 Feb 2026 23:49:52 -0500

demiurge: attempt to make wireguard wait for secret keys to be available

Diffstat:
M
epistemia/systems/demiurge.scm
 | 
4
+++-

1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm
@@ -213,7 +213,8 @@ rpz:
 						      (port 51821)
 						      (bootstrap-private-key? #f)
 						      (private-key "/run/secrets/wg0_demiurge")
-						      (pre-up '("ip route replace 79.127.222.207 via 192.168.1.1 dev eth0"))
+						      (pre-up '("while [ ! -f /run/secrets/wg0_demiurge ]; do sleep 1; done"
+								"ip route replace 79.127.222.207 via 192.168.1.1 dev eth0"))
 						      (post-up
 						       (list "ip rule add fwmark 0x1 table 100 priority 100"
 							     "ip rule add fwmark 51820 table 100 priority 100"
@@ -245,6 +246,7 @@ rpz:
 						      (private-key "/run/secrets/wg1_demiurge")
 						      (table #f)
 						      (shepherd-requirement '(age-secret))
+						      (pre-up '("while [ ! -f /run/secrets/wg1_demiurge ]; do sleep 1; done"))
 						      (post-up
 						       ;; IPv4 and IPv6 NAT
 						       (list #~(string-append #$(file-append iptables "/sbin/iptables") " -t nat -I POSTROUTING 1 -s 10.0.13.4/32 -o wg0 -j MASQUERADE")