JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

irqbalance: systemd service config aligned with upstream

Browse Source 
Aligned systemd service config with the definition in the upstream repo:
https://github.com/Irqbalance/irqbalance/blob/master/misc/irqbalance.service#L7.

Other than adding some level of sandboxing it also fixes the "Daemon
couldn't be bound to the file-based socket." warning reported on
irqbalance startup due to the fact that the "/run/irqbalance" directory
didn't exist. The "RuntimeDirectory" property makes sure it gets
created. The aforementioned warning didn't cause any problems I could
spot though.

I have verified that both `irqbalance` as well as `irqbalance-ui` work
fine with this new systemd service config.
This commit is contained in:
snicket2100 2020-01-25 00:28:25 +01:00
parent e96265ebcd
commit a5ab947003
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
nixos/modules/services/hardware/irqbalance.nix
View File

@ -17,8 +17,15 @@ in
irqbalance = {
description = "irqbalance daemon";
path = [ pkgs.irqbalance ];
serviceConfig =
{ ExecStart = "${pkgs.irqbalance}/bin/irqbalance --foreground"; };
serviceConfig = {
ExecStart = "${pkgs.irqbalance}/bin/irqbalance --foreground";
CapabilityBoundingSet = "";
NoNewPrivileges = "yes";
ReadOnlyPaths = "/";
ReadWritePaths = "/proc/irq";
RestrictAddressFamilies = "AF_UNIX";
RuntimeDirectory = "irqbalance/";
};
wantedBy = [ "multi-user.target" ];
};
};