mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-09-11 07:15:54 +03:00
nixos/pretix: Fix pdf generation
Previously, pdftk (part of the ticket, badge, ... generation pipeline) would fail with: ``` Error occurred during initialization of VM Failed to mark memory page as executable - check if grsecurity/PaX is enabled ``` Thise caused pdf generation to fail. Since pdftk is a java application and, according to systemd.exec(5), > Note that [MemoryDenyWriteExecute=] is incompatible with programs and > libraries that generate program code dynamically at runtime, including > JIT execution engines, executable stacks, and code "trampoline" featu > re of various C compilers. Disabling `MemoryDenyWriteExecute=` fixes it.
This commit is contained in:
parent
c08b185484
commit
6d5a6cab71
@ -479,7 +479,7 @@ in
|
||||
CapabilityBoundingSet = [ "" ];
|
||||
DevicePolicy = "closed";
|
||||
LockPersonality = true;
|
||||
MemoryDenyWriteExecute = true;
|
||||
MemoryDenyWriteExecute = false; # required by pdftk
|
||||
NoNewPrivileges = true;
|
||||
PrivateDevices = true;
|
||||
PrivateTmp = true;
|
||||
|
Loading…
Reference in New Issue
Block a user