ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

modules: services: woodpecker: allow setuid
All checks were successful
ci/woodpecker/push/check Pipeline was successful
Details

Browse source 
I need it to be able to use `ssh-agent`, for some of my workflows.
This commit is contained in:
Bruno BELANYI 2023-04-01 21:05:20 +02:00
parent 0da267664c
commit f15b3aa23d
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
modules/services/woodpecker/agent-exec/default.nix
View file

@ -45,6 +45,9 @@ in
]; ];
serviceConfig = { serviceConfig = {
# Same option as upstream, without @setuid
SystemCallFilter = lib.mkForce "~@clock @privileged @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap";
BindPaths = [ BindPaths = [
"/nix/var/nix/daemon-socket/socket" "/nix/var/nix/daemon-socket/socket"
"/run/nscd/socket" "/run/nscd/socket"