nix cgroups

This commit is contained in:
Peder Bergebakken Sundt 2025-02-21 18:44:24 +01:00
parent a46044e805
commit dfa89ed7c2
4 changed files with 10 additions and 0 deletions

View File

@ -12,6 +12,7 @@
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../../../profiles/sshd.nix ../../../profiles/sshd.nix
../../../profiles/nix-cgroups.nix
../../../users/pbsds ../../../users/pbsds
../../../users/daniel ../../../users/daniel

View File

@ -14,6 +14,7 @@
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../../../profiles/sshd.nix ../../../profiles/sshd.nix
../../../profiles/nix-cgroups.nix
../../../users/pbsds ../../../users/pbsds
../../../users/bartvbl ../../../users/bartvbl

View File

@ -23,6 +23,7 @@
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../../../profiles/sshd.nix ../../../profiles/sshd.nix
../../../profiles/nix-cgroups.nix
#../../../profiles/no-suspend.nix #../../../profiles/no-suspend.nix
#../../../profiles/oci/podman.nix #../../../profiles/oci/podman.nix
../../../profiles/oci/docker.nix ../../../profiles/oci/docker.nix

7
profiles/nix-cgroups.nix Normal file
View File

@ -0,0 +1,7 @@
{
# using cgroups for the nix sandbox is a bit slower, but more secure
nix.settings.use-cgroups = true;
nix.settings.experimental-features = [
"cgroups"
];
}