snicket2100 2b0ee787dd mosquitto: systemd service sandboxing ...

running the service in a sandbox. read-only root file system,
with tmpfs mounted in /tmp, hidden /root and /home,
temporary /dev. the only writeable path is the data directory,
which according to my experiments is enough for the service
to work correctly.

2020-04-13 10:46:56 +02:00

..

config

Merge master into staging-next

2020-04-03 21:54:40 +02:00

hardware

treewide: Per RFC45, remove all unquoted URLs

2020-04-10 17:54:53 +01:00

i18n/input-method

nixos/ibus: fix evaluation

2020-04-05 02:23:38 +02:00

installer

nix: Fix fallback paths

2020-04-10 21:13:15 +02:00

misc

treewide: Per RFC45, remove all unquoted URLs

2020-04-10 17:54:53 +01:00

profiles

Revert "nixos/hardened: build sandbox incompatible with namespaces"

2020-04-05 17:38:15 +02:00

programs

nixos/ssh: don't accept ssh-dss keys

2020-04-07 13:35:51 +00:00

security

acme: create certificates in subdirectory

2020-04-09 08:26:07 +01:00

services

mosquitto: systemd service sandboxing

2020-04-13 10:46:56 +02:00

system

Merge pull request #81848 from grahamc/nested-specialisation

2020-04-12 08:56:11 -04:00

tasks

treewide: Per RFC45, remove all unquoted URLs

2020-04-10 17:54:53 +01:00

testing

nixos/service-runner.nix: Allow quotes in commands + test

2020-02-28 14:26:29 +01:00

virtualisation

nixos/treewide: Fix incorrectly rendered examples

2020-04-02 07:49:25 +02:00

module-list.nix

nixos/pixiecore: init (#83406)

2020-04-02 13:06:21 +01:00

rename.nix

nixos: fix module paths in rename.nix

2020-03-11 15:59:22 +01:00