From 22fff7274fe3d3b2c11bd49bfb417265039930df Mon Sep 17 00:00:00 2001
From: Ivan Petkov <ivanppetkov@gmail.com>
Date: Sat, 27 Jun 2026 14:24:17 -0700
Subject: [PATCH 1/2] nixos/syncoid: allow `@timer` syscalls

Syncoid uses `pv` to display information about transfer speeds. During
the pv bump from 1.10.5 to 1.11.0 it started using the setitimer syscall
(included by `@timer`) which would segfault given that the sandbox
configuration was set to block all syscalls in the `@timer` group
---
 nixos/modules/services/backup/syncoid.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/backup/syncoid.nix b/nixos/modules/services/backup/syncoid.nix
index 4fda57e8214c..8bfb3d70a6e6 100644
--- a/nixos/modules/services/backup/syncoid.nix
+++ b/nixos/modules/services/backup/syncoid.nix
@@ -459,7 +459,8 @@ in
                 "~@privileged"
                 "~@resources"
                 "~@setuid"
-                "~@timer"
+                # NB: pv after 1.11.0 uses timer syscalls (specifically setitimer)
+                # "~@timer"
               ];
               SystemCallArchitectures = "native";
               # This is for BindPaths= and BindReadOnlyPaths=

From 0874f3bc450dab7a84c656fd2c1c998f18835987 Mon Sep 17 00:00:00 2001
From: Ivan Petkov <ivanppetkov@gmail.com>
Date: Sat, 27 Jun 2026 17:59:21 -0700
Subject: [PATCH 2/2] pv: set nixosTests.sanoid as part of passthru.tests

The recent bump from 1.10.5 to 1.11.0 broke syncoid (and its tests) so
this will avoid future breakage in the absence of pv-specific tests
---
 pkgs/by-name/pv/pv/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/pv/pv/package.nix b/pkgs/by-name/pv/pv/package.nix
index 621925dcb881..1e89613cf82e 100644
--- a/pkgs/by-name/pv/pv/package.nix
+++ b/pkgs/by-name/pv/pv/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchurl,
+  nixosTests,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -13,6 +14,9 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-/ALJ/CuCsgqSzI2Y+ES+Y/IqvZh1Go5KvIdeHYA2Yus=";
   };
 
+  # pv is used by syncoid (part of the sanoid package) by default
+  passthru.tests = nixosTests.sanoid;
+
   meta = {
     homepage = "https://www.ivarch.com/programs/pv.shtml";
     description = "Tool for monitoring the progress of data through a pipeline";