conduwuit for NixOS
conduwuit can be acquired by Nix (or Lix) from various places:
- The
flake.nix
at the root of the repo - The
default.nix
at the root of the repo - From conduwuit's binary cache
A community maintained NixOS package is available at conduwuit
Binary cache
A binary cache for conduwuit that the CI/CD publishes to is available at the following places (both are the same just different names):
https://attic.kennel.juneis.dog/conduit
conduit:eEKoUwlQGDdYmAI/Q/0slVlegqh/QmAvQd7HBSm21Wk=
https://attic.kennel.juneis.dog/conduwuit
conduwuit:BbycGUgTISsltcmH0qNjFR9dbrQNYgdIAcmViSGoVTE=
The binary caches were recreated some months ago due to attic issues. The old public keys were:
conduit:Isq8FGyEC6FOXH6nD+BOeAA+bKp6X6UIbupSlGEPuOg=
conduwuit:lYPVh7o1hLu1idH4Xt2QHaRa49WRGSAqzcfFd94aOTw=
If needed, we have a binary cache on Cachix but it is only limited to 5GB:
https://conduwuit.cachix.org
conduwuit.cachix.org-1:MFRm6jcnfTf0jSAbmvLfhO3KBMt4px+1xaereWXp8Xg=
If specifying a Git remote URL in your flake, you can use any remotes that
are specified on the README (the mirrors), such as the GitHub: github:girlbossceo/conduwuit
NixOS module
The flake.nix
and default.nix
do not currently provide a NixOS module (contributions
welcome!), so services.matrix-conduit
from Nixpkgs can be used to configure
conduwuit.
Conduit NixOS Config Module and SQLite
Beware! The services.matrix-conduit
module defaults to SQLite as a database backend.
Conduwuit dropped SQLite support in favor of exclusively supporting the much faster RocksDB.
Make sure that you are using the RocksDB backend before migrating!
There is a tool to migrate a Conduit SQLite database to RocksDB.
If you want to run the latest code, you should get conduwuit from the flake.nix
or default.nix
and set services.matrix-conduit.package
appropriately to use conduwuit instead of Conduit.
UNIX sockets
Due to the lack of a conduwuit NixOS module, when using the services.matrix-conduit
module
a workaround like the one below is necessary to use UNIX sockets. This is because the UNIX
socket option does not exist in Conduit, and the module forcibly sets the address
and
port
config options.
options.services.matrix-conduit.settings = lib.mkOption {
apply = old: old // (
if (old.global ? "unix_socket_path")
then { global = builtins.removeAttrs old.global [ "address" "port" ]; }
else { }
);
};
Additionally, the matrix-conduit
systemd unit in the module does not allow
the AF_UNIX
socket address family in their systemd unit's RestrictAddressFamilies=
which
disallows the namespace from accessing or creating UNIX sockets and has to be enabled like so:
systemd.services.conduit.serviceConfig.RestrictAddressFamilies = [ "AF_UNIX" ];
Even though those workarounds are feasible a conduwuit NixOS configuration module, developed and published by the community, would be appreciated.
jemalloc and hardened profile
conduwuit uses jemalloc by default. This may interfere with the hardened.nix
profile
due to them using scudo
by default. You must either disable/hide scudo
from conduwuit, or
disable jemalloc like so:
let
conduwuit = pkgs.unstable.conduwuit.override {
enableJemalloc = false;
};
in