fix race condition (i hope)
This commit is contained in:
parent
b2f706bf83
commit
ec80dc24fb
@ -1,15 +1,23 @@
|
|||||||
{ config, lib, pkgs, ... }: let
|
{
|
||||||
|
config,
|
||||||
|
lib,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}:
|
||||||
|
let
|
||||||
inherit (lib) getExe;
|
inherit (lib) getExe;
|
||||||
aa-alias-manager = pkgs.callPackage ./aa-alias-manager-package.nix { };
|
aa-alias-manager = pkgs.callPackage ./aa-alias-manager-package.nix { };
|
||||||
alias_dir = "/run/aliases.d";
|
alias_dir = "/run/aliases.d";
|
||||||
in {
|
in
|
||||||
|
{
|
||||||
config = {
|
config = {
|
||||||
security.apparmor.includes."tunables/alias.d/store" = ''
|
security.apparmor.includes."tunables/alias.d/store" = ''
|
||||||
include if exists "${alias_dir}"
|
include if exists "${alias_dir}"
|
||||||
'';
|
'';
|
||||||
|
|
||||||
systemd.services.aa-alias-setup = {
|
systemd.services.aa-alias-setup = {
|
||||||
wantedBy = [ "apparmor.service" ];
|
before = [ "apparmor.service" ];
|
||||||
|
requiredBy = [ "apparmor.service" ];
|
||||||
path = [ config.nix.package ]; # respect the users choice to use alternative nix implementations
|
path = [ config.nix.package ]; # respect the users choice to use alternative nix implementations
|
||||||
|
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
|
Loading…
Reference in New Issue
Block a user