public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

prometheus-node-exporter service: run as nobody again 

Using DynamicUser breaks the systemd and logind collectors.

cc #30535
This commit is contained in:
Franz Pletz 2017-10-25 17:49:40 +02:00
parent b3dc24c8c8
commit 63bbada520
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/services/monitoring/prometheus/node-exporter.nix
View File

@ -69,8 +69,8 @@ in {
${concatStringsSep " \\\n " cfg.extraFlags} ${concatStringsSep " \\\n " cfg.extraFlags}
''; '';
serviceConfig = { serviceConfig = {
DynamicUser = true; User = "nobody";
Restart = "always"; Restart = "always";
PrivateTmp = true; PrivateTmp = true;
WorkingDirectory = /tmp; WorkingDirectory = /tmp;
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";