diff options
Diffstat (limited to 'infra/libkookie/nixpkgs/nixos/modules/security/hidepid.nix')
-rw-r--r-- | infra/libkookie/nixpkgs/nixos/modules/security/hidepid.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/infra/libkookie/nixpkgs/nixos/modules/security/hidepid.nix b/infra/libkookie/nixpkgs/nixos/modules/security/hidepid.nix index 55a48ea3c9c6..4953f517e93b 100644 --- a/infra/libkookie/nixpkgs/nixos/modules/security/hidepid.nix +++ b/infra/libkookie/nixpkgs/nixos/modules/security/hidepid.nix @@ -23,5 +23,9 @@ with lib; boot.specialFileSystems."/proc".options = [ "hidepid=2" "gid=${toString config.ids.gids.proc}" ]; systemd.services.systemd-logind.serviceConfig.SupplementaryGroups = [ "proc" ]; + + # Disable cgroupsv2, which doesn't work with hidepid. + # https://github.com/NixOS/nixpkgs/pull/104094#issuecomment-729996203 + systemd.enableUnifiedCgroupHierarchy = false; }; } |