nixos/paperless-ng: fix #164615
Add an exception to the `paperless-ng-server` service's
`SystemCallFilter` as the `mbind` syscall is needed when consuming a
document while having a classification model present.
commitfd2215b20c295a5c914822599a50533439d39880
authorMartin Wurm <martin.wurm@mart-w.de>
dateThu 17 Mar 2022, 19:35 (5 years ago)
parentdd8cebe
nixos/modules/services/misc/paperless-ng.nix+2
@@ -214,6 +214,8 @@ in
214214 User = cfg.user;
215215 ExecStart = "${cfg.package}/bin/paperless-ng qcluster";
216216 Restart = "on-failure";
217+ # The `mbind` syscall is needed for running the classifier.
218+ SystemCallFilter = defaultServiceConfig.SystemCallFilter ++ [ "mbind" ];
217219 };
218220 environment = env;
219221 wantedBy = [ "multi-user.target" ];