nixos/nscd: document why it is configured this way
This commit is contained in:
parent
f7c776760b
commit
d79584c902
@ -52,6 +52,12 @@ in
|
|||||||
config.environment.etc."nscd.conf".source
|
config.environment.etc."nscd.conf".source
|
||||||
];
|
];
|
||||||
|
|
||||||
|
# We use DynamicUser because in default configurations nscd doesn't
|
||||||
|
# create any files that need to survive restarts. However, in some
|
||||||
|
# configurations, nscd needs to be started as root; it will drop
|
||||||
|
# privileges after all the NSS modules have read their configuration
|
||||||
|
# files. So prefix the ExecStart command with "!" to prevent systemd
|
||||||
|
# from dropping privileges early. See ExecStart in systemd.service(5).
|
||||||
serviceConfig =
|
serviceConfig =
|
||||||
{ ExecStart = "!@${pkgs.glibc.bin}/sbin/nscd nscd";
|
{ ExecStart = "!@${pkgs.glibc.bin}/sbin/nscd nscd";
|
||||||
Type = "forking";
|
Type = "forking";
|
||||||
|
Loading…
x
Reference in New Issue
Block a user