Skip to content

Commit

Permalink
nixos-modules/host: revert disabling seccomp filter for virtiofsd
Browse files Browse the repository at this point in the history
nixpkgs fix has arrived in nixos-unstable, and nixos-23.05:
- NixOS/nixpkgs#236498
- NixOS/nixpkgs#236585
  • Loading branch information
astro committed Jun 10, 2023
1 parent 28e892c commit 5e9c40d
Showing 1 changed file with 0 additions and 3 deletions.
3 changes: 0 additions & 3 deletions nixos-modules/host.nix
Original file line number Diff line number Diff line change
Expand Up @@ -367,16 +367,13 @@ in
LimitNOFILE = 1048576;
};
path = with pkgs; [ coreutils virtiofsd ];
# TODO: remove `--seccomp=none` again
# https://gitlab.com/virtio-fs/virtiofsd/-/issues/104
script = ''
for d in current/share/microvm/virtiofs/*; do
SOCKET=$(cat $d/socket)
SOURCE=$(cat $d/source)
mkdir -p $SOURCE
virtiofsd \
--seccomp=none \
--socket-path=$SOCKET \
--socket-group=${config.users.users.microvm.group} \
--shared-dir $SOURCE \
Expand Down

0 comments on commit 5e9c40d

Please sign in to comment.