diff --git a/nixos/modules/services/continuous-integration/jenkins/default.nix b/nixos/modules/services/continuous-integration/jenkins/default.nix index 8b44dfb83335..8ec7c972436b 100644 --- a/nixos/modules/services/continuous-integration/jenkins/default.nix +++ b/nixos/modules/services/continuous-integration/jenkins/default.nix @@ -261,6 +261,7 @@ in CapabilityBoundingSet = ""; LockPersonality = true; # MemoryDenyWriteExecute = false; Breaks execution; + MountAPIVFS = true; NoNewPrivileges = true; PrivateDevices = true; PrivateMounts = true;