nixpkgs/nixos/modules/system
John Titor f597c68e7b
nixos/boot/systemd: enable tracefs
tracefs is a special-purpose filesystem in Linux used for tracing filesystem and kernel operations.

This was added to the kernel back in 2015 to replace debugfs. For security reasons, some system do not mount debugfs at all. Tracefs reduces the attack surface by allowing to trace without mounting debugfs. Additionally it provides features not supported by debugfs (such as calls for mkdir and rmdir

Debian and Arch Linux both enable this by default.
RHEL 8 and later, they enable tracefs by default.

Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
2025-03-10 22:27:41 +05:30
..
activation treewide: add name argument to calls to testers.shellcheck 2025-03-08 00:15:22 +00:00
boot nixos/boot/systemd: enable tracefs 2025-03-10 22:27:41 +05:30
etc nioxs/etc: improve docs for file ownership 2025-02-01 22:37:46 +01:00
build.nix treewide: format all inactive Nix files 2024-12-10 20:26:33 +01:00