X-Git-Url: http://git.scottworley.com/auto-upgrade-with-pinch/blobdiff_plain/e830691a697a3a5d0e4461ceb073ac36abdfe3d6..4a164d4e0c88d28a68b71174e38b138ba1e7504e:/modules/auto-upgrade.nix?ds=sidebyside

diff --git a/modules/auto-upgrade.nix b/modules/auto-upgrade.nix
index 4a5aa83..a80aa5c 100644
--- a/modules/auto-upgrade.nix
+++ b/modules/auto-upgrade.nix
@@ -1,3 +1,9 @@
+# auto-upgrade-with-pinch: Secure managed NixOS updates
+#
+# This program is free software: you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by the
+# Free Software Foundation, version 3.
+
 { config, lib, pkgs, ... }:
 with lib;
 let
@@ -59,7 +65,9 @@ let
   '';
 
   auto-upgrade-script = pkgs.writeShellScript "auto-upgrade" ''
-    ${pkgs.utillinux}/bin/flock /run/auto-upgrade-with-pinch ${
+    ${pkgs.coreutils}/bin/nice -n 17 \
+    ${pkgs.util-linux}/bin/ionice -c 3 \
+    ${pkgs.util-linux}/bin/flock /run/auto-upgrade-with-pinch ${
       pkgs.writeShellScript "auto-upgrade-with-lock-held" ''
         set -eo pipefail