virtualisation.lxc: add the overrides from distrobuilder

2021-11-03 07:49:52 +01:00
parent 1c7a7f198c
commit 5ea329958a
1 changed files with 8 additions and 0 deletions
@@ -105,6 +105,14 @@ in
      extraCommands = "mkdir -p proc sys dev";
    });

+    # Add the overrides from lxd distrobuilder
+    systemd.extraConfig = ''
+      [Service]
+      ProtectProc=default
+      ProtectControlGroups=no
+      ProtectKernelTunables=no
+    '';
+
    # Allow the user to login as root without password.
    users.users.root.initialHashedPassword = mkOverride 150 "";