nixos/chrony: do not require CAP_SYS_TIME when not controlling system clock

2025-09-14 23:48:03 +02:00
parent 8d8ddd50cb
commit 3e91417f82
1 changed files with 3 additions and 1 deletions
@@ -231,7 +231,9 @@ in

      path = [ chronyPkg ];

-      unitConfig.ConditionCapability = "CAP_SYS_TIME";
+      unitConfig = lib.mkIf (!lib.elem "-x" cfg.extraFlags && !cfg.enableRTCTrimming) {
+        ConditionCapability = "CAP_SYS_TIME";
+      };
      serviceConfig = {
        Type = "notify";
        ExecStart = "${chronyPkg}/bin/chronyd ${builtins.toString chronyFlags}";