fix race condition (i hope)

This commit is contained in:
Grimmauld 2024-10-25 18:13:30 +02:00
parent b2f706bf83
commit ec80dc24fb
Signed by: Grimmauld
GPG Key ID: C2946668769F91FB

View File

@ -1,15 +1,23 @@
{ config, lib, pkgs, ... }: let {
config,
lib,
pkgs,
...
}:
let
inherit (lib) getExe; inherit (lib) getExe;
aa-alias-manager = pkgs.callPackage ./aa-alias-manager-package.nix { }; aa-alias-manager = pkgs.callPackage ./aa-alias-manager-package.nix { };
alias_dir = "/run/aliases.d"; alias_dir = "/run/aliases.d";
in { in
{
config = { config = {
security.apparmor.includes."tunables/alias.d/store" = '' security.apparmor.includes."tunables/alias.d/store" = ''
include if exists "${alias_dir}" include if exists "${alias_dir}"
''; '';
systemd.services.aa-alias-setup = { systemd.services.aa-alias-setup = {
wantedBy = [ "apparmor.service" ]; before = [ "apparmor.service" ];
requiredBy = [ "apparmor.service" ];
path = [ config.nix.package ]; # respect the users choice to use alternative nix implementations path = [ config.nix.package ]; # respect the users choice to use alternative nix implementations
serviceConfig = { serviceConfig = {