movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-12 04:35:41 +03:00
Code Issues Projects Releases Packages Wiki Activity

nixos/proxmox-lxc: fix ping in unprivileged LXCs

Browse source
This commit is contained in:
illustris 2024-06-15 20:29:01 +05:30
parent 33f93a8999
commit 01b159092f
No known key found for this signature in database
GPG key ID: 56C8FC0B899FEFA3
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nixos/modules/virtualisation/proxmox-lxc.nix
View file

@ -65,6 +65,14 @@ with lib;
hostName = mkIf (!cfg.manageHostName) (mkForce "");
};
# unprivileged LXCs can't set net.ipv4.ping_group_range
security.wrappers.ping = mkIf (!cfg.privileged) {
owner = "root";
group = "root";
capabilities = "cap_net_raw+p";
source = "${pkgs.iputils.out}/bin/ping";
};
services.openssh = {
enable = mkDefault true;
startWhenNeeded = mkDefault true;