Merge pull request #108028 from Mic92/confinment

systemd-confinement: use /var/empty as chroot mountpoint
2021-07-01 07:09:27 +01:00
parent cd687af9f4 e12188c0f2
commit 8737aa9311
1 changed files with 1 additions and 1 deletions
@@ -105,7 +105,7 @@ in {
        wantsAPIVFS = lib.mkDefault (config.confinement.mode == "full-apivfs");
      in lib.mkIf config.confinement.enable {
        serviceConfig = {
-          RootDirectory = pkgs.runCommand rootName {} "mkdir \"$out\"";
+          RootDirectory = "/var/empty";
          TemporaryFileSystem = "/";
          PrivateMounts = lib.mkDefault true;