nixos/gns3-server: disable SystemD DisableUser
Usage of DynamicUser is compatible with SUID wrappers. GNS3 needs to call ubridge via its SUID Wrapper to work.
This commit is contained in:
committed by
Anthony ROUSSEL
parent
46044101f3
commit
77edd2b066
@@ -129,8 +129,15 @@ in {
|
||||
}
|
||||
];
|
||||
|
||||
users.groups.gns3 = { };
|
||||
|
||||
users.groups.ubridge = lib.mkIf cfg.ubridge.enable { };
|
||||
|
||||
users.users.gns3 = {
|
||||
group = "gns3";
|
||||
isSystemUser = true;
|
||||
};
|
||||
|
||||
security.wrappers.ubridge = lib.mkIf cfg.ubridge.enable {
|
||||
capabilities = "cap_net_raw,cap_net_admin=eip";
|
||||
group = "ubridge";
|
||||
@@ -206,7 +213,6 @@ in {
|
||||
serviceConfig = {
|
||||
ConfigurationDirectory = "gns3";
|
||||
ConfigurationDirectoryMode = "0750";
|
||||
DynamicUser = true;
|
||||
Environment = "HOME=%S/gns3";
|
||||
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
|
||||
ExecStart = "${lib.getExe cfg.package} ${commandArgs}";
|
||||
|
||||
Reference in New Issue
Block a user