Commit graph

8 commits

Author SHA1 Message Date
4ac95b4f6d
bert: navidrome: Disable MemoryDenyWriteExecute for wasm jit
Without this, we see this error:

    Feb 22 18:07:12 bert navidrome[230133]: time="2026-02-22T18:07:12-06:00" level=info msg="Watcher started for library" absoluteLibPath=/mnt/bigbird_public/media/music libraryID=1 name="Music Library" path=/mnt/bigbird_public/media/music
    Feb 22 18:07:13 bert navidrome[230156]: panic: permission denied [recovered, repanicked]
    Feb 22 18:07:13 bert navidrome[230156]: goroutine 1037 [running]:
    Feb 22 18:07:13 bert navidrome[230156]: go.senan.xyz/taglib.init.OnceValues[...].func3.1.1()
    Feb 22 18:07:13 bert navidrome[230156]:         sync/oncefunc.go:98 +0x75
    Feb 22 18:07:13 bert navidrome[230156]: panic({0x13a32e0?, 0x3649328?})
    Feb 22 18:07:13 bert navidrome[230156]:         runtime/panic.go:783 +0x132
    Feb 22 18:07:13 bert navidrome[230156]: github.com/tetratelabs/wazero/internal/engine/wazevo.mmapExecutable({0xc00030f000, 0xaf0, 0xc000737800?})
    Feb 22 18:07:13 bert navidrome[230156]:         github.com/tetratelabs/wazero@v1.11.0/internal/engine/wazevo/engine.go:881 +0xb4
    […]
    Feb 22 18:07:13 bert navidrome[230133]: time="2026-02-22T18:07:13-06:00" level=error msg="Scan failed" error="failed to read status from scanner: /nix/store/622zip549ggami2mslhabm80sfsjlrxd-navidrome-0.60.0/bin/.navidrome-wrapped scan --nobanner --subprocess --configfile /nix/store/dxsk74a7b92vkv5mwaaihqcrlqmhlnq0-navidrome.json --datafolder . --cachefolder cache exited with non-zero status code: exit status 2"
    Feb 22 18:49:32 bert navidrome[230133]: time="2026-02-22T18:49:32-06:00" level=info msg="Stopping HTTP server"

mkForce is required to avoid a conflicting definition error:

    error: The option `systemd.services.navidrome.serviceConfig.MemoryDenyWriteExecute' has conflicting definition values:
    - In `/nix/store/jyqf4h6n1wm7kg3qrc5njvvgzkn1m2j5-nixos-25.11/nixos/nixos/modules/services/audio/navidrome.nix': true
    - In `/root/config/services/navidrome.nix': false
    Use `lib.mkForce value` or `lib.mkDefault value` to change the priority on any of these definitions.
2026-02-26 21:37:51 -06:00
516b9dd0ac
bert: Upgrade Navidrome to 0.60.0 2026-02-18 18:32:41 -06:00
78c7ec0ce4
bert: Update navidrome to 0.59.0 2025-12-06 19:18:15 -06:00
98acc3644c
bert: Upgrade Navidrome to 0.57.0 2025-07-23 13:59:12 -05:00
71a39e5a35
bert: Remove Navidrome version pin 2025-06-05 19:10:32 -05:00
d45446b410
Upgrade navidrome to remediate auth bypass bug
Ref: https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p
2025-02-22 19:29:42 -06:00
ccc8708a6b
bert: Rename mount so systemd doesn't escape hyphen 2025-01-14 23:31:40 -06:00
5271fe9965
bert: Add navidrome 2024-11-12 10:56:03 -06:00