nixpkgs/nixos/modules
aszlig e4bd1e8f92
nixos/confinement: Use prio 100 for RootDirectory
One of the module that already supports the systemd-confinement module
is public-inbox. However with the changes to support DynamicUser and
ProtectSystem, the module will now fail at runtime if confinement is
enabled (it's optional and you'll need to override it via another
module).

The reason is that the RootDirectory is set to /var/empty in the
public-inbox module, which doesn't work well with the InaccessiblePaths
directive we now use to support DynamicUser/ProtectSystem.

To make this issue more visible, I decided to just change the priority
of the RootDirectory option definiton the default override priority so
that whenever another different option is defined, we'll get a conflict
at evaluation time.

Signed-off-by: aszlig <aszlig@nix.build>
2024-05-13 00:40:41 +02:00
..
config nixos/terminfo: always use buildPlatform's terminfo (#309108) 2024-05-06 09:04:43 +00:00
hardware Merge pull request #309052 from kira-bruneau/intel-gpu-tools 2024-05-07 23:28:45 +02:00
i18n/input-method nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
image nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
installer treewide: reanme renamed libinput options 2024-04-17 23:34:07 +02:00
misc nixos/manual: apply cfg.warningsAreErrors to nix eval as well 2024-04-21 18:01:26 +02:00
profiles nixos/top-level: Rename system.forbiddenDependenciesRegex to system.forbiddenDependenciesRegexes 2024-05-02 21:08:39 +03:00
programs Merge pull request #304773 from acid-bong/no-libs 2024-05-12 21:52:15 +02:00
security nixos/confinement: Use prio 100 for RootDirectory 2024-05-13 00:40:41 +02:00
services Merge pull request #310873 from ivan/radvd-debuglevel 2024-05-12 22:23:24 +02:00
system Merge pull request #306926 from tie/networkd-global-ipv6-privacy-extensions 2024-05-08 14:41:08 +03:00
tasks Merge pull request #287505 from jpds/zfs-scrub-trim-randomizedDelaySec 2024-05-10 02:11:13 +02:00
testing nixos/tests: set non-conflicting priority for logrotate disabling 2024-05-10 16:25:51 +03:00
virtualisation Merge pull request #307039 from adamcstephens/nixos-unstable 2024-05-09 09:59:37 -04:00
module-list.nix nixos/private-gpt: init 2024-05-11 22:42:04 +02:00
rename.nix treewide: rename renamed sddm/displayManager settings 2024-04-08 21:56:38 +02:00