Miguel Palhas
a273e10d29
Default nixpkgs sunshine is built -DSUNSHINE_ENABLE_CUDA=FALSE, so every
NVENC probe died with "Couldn't scale frame" and it fell back to CPU
x264. Fix:
- package = sunshine.override { cudaSupport = true; } — gives it the
CUDA scaling/colour-conversion path. Verified: probe now finds
h264_nvenc / hevc_nvenc / av1_nvenc.
- LD_LIBRARY_PATH=/run/opengl-driver/lib on the service so libcuda.so.1
(NVIDIA driver) is discoverable.
- capSysAdmin = false — Hyprland/wlroots capture via wlr-screencopy needs
no CAP_SYS_ADMIN, and the setcap wrapper's secure-exec mode would strip
LD_LIBRARY_PATH and break libcuda loading.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
50 lines
2.2 KiB
Nix
50 lines
2.2 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
# Sunshine — self-hosted game-stream host for Moonlight clients (the NVIDIA
|
|
# Shield runs Moonlight). Host-level because it needs root-owned bits: display
|
|
# capture, /dev/uinput for virtual gamepad/mouse, and firewall ports.
|
|
#
|
|
# Hardware (NVENC) encoding on this box needs two things that the stock
|
|
# nixpkgs setup doesn't give you:
|
|
#
|
|
# 1. A CUDA-enabled Sunshine. The default build is compiled with
|
|
# -DSUNSHINE_ENABLE_CUDA=FALSE, so it has the NVENC *encoders* but no CUDA
|
|
# frame-scaling/colour-conversion path — every NVENC probe dies with
|
|
# "Couldn't scale frame: Invalid argument" and it silently falls back to
|
|
# CPU x264. `cudaSupport = true` rebuilds it with CUDA.
|
|
#
|
|
# 2. libcuda.so.1 discoverable at runtime. It lives in /run/opengl-driver/lib
|
|
# (NVIDIA driver), which isn't on Sunshine's default library path, so we
|
|
# add it via LD_LIBRARY_PATH on the service.
|
|
#
|
|
# capSysAdmin is deliberately OFF: Hyprland is wlroots-based, so Sunshine
|
|
# captures via wlr-screencopy and never needs CAP_SYS_ADMIN. Keeping the setcap
|
|
# wrapper would be worse than useless here — glibc runs setcap binaries in
|
|
# secure-execution mode, which *ignores* LD_LIBRARY_PATH, so it would break the
|
|
# libcuda loading from (2) and take NVENC down with it.
|
|
#
|
|
# The NVIDIA specifics above are the only vendor-aware bits; capSysAdmin =
|
|
# false + wlr-screencopy is correct for any wlroots compositor, and on an
|
|
# AMD/Intel host you'd drop cudaSupport and use VAAPI instead.
|
|
#
|
|
# First run: open https://<host>:47990 to set the web-UI credentials, then pair
|
|
# the Shield (enter the PIN Moonlight shows). Moonlight discovers the host via
|
|
# Sunshine's built-in mDNS.
|
|
{
|
|
services.sunshine = {
|
|
enable = true;
|
|
package = pkgs.sunshine.override { cudaSupport = true; };
|
|
autoStart = true; # start with the graphical session
|
|
openFirewall = true; # 47984-48010 TCP + 47998-48010 UDP for Moonlight
|
|
capSysAdmin = false; # wlr-screencopy capture; see header re: libcuda
|
|
};
|
|
|
|
# Let Sunshine find the NVIDIA driver's libcuda.so.1 for NVENC. Merges into
|
|
# the module's own systemd.user.services.sunshine definition.
|
|
systemd.user.services.sunshine.environment.LD_LIBRARY_PATH = "/run/opengl-driver/lib";
|
|
}
|