nixos/clamav: add system-clamav.slice

Tracking: https://github.com/NixOS/nixpkgs/issues/279915
This commit is contained in:
Tomodachi94 2024-08-23 17:09:11 -07:00
parent 7bc08d0195
commit 695b1c874d
No known key found for this signature in database
GPG Key ID: 2E275F21C4D554A3

View File

@ -164,6 +164,10 @@ in
environment.etc."clamav/freshclam.conf".source = freshclamConfigFile;
environment.etc."clamav/clamd.conf".source = clamdConfigFile;
systemd.slices.system-clamav = {
description = "ClamAV slice";
};
systemd.services.clamav-daemon = mkIf cfg.daemon.enable {
description = "ClamAV daemon (clamd)";
after = optionals cfg.updater.enable [ "clamav-freshclam.service" ];
@ -181,6 +185,7 @@ in
PrivateTmp = "yes";
PrivateDevices = "yes";
PrivateNetwork = "yes";
Slice = "system-clamav.slice";
};
};
@ -208,6 +213,7 @@ in
Group = clamavGroup;
PrivateTmp = "yes";
PrivateDevices = "yes";
Slice = "system-clamav.slice";
};
};
@ -229,6 +235,7 @@ in
Group = clamavGroup;
PrivateTmp = "yes";
PrivateDevices = "yes";
Slice = "system-clamav.slice";
};
};
@ -255,6 +262,7 @@ in
Group = clamavGroup;
PrivateTmp = "yes";
PrivateDevices = "yes";
Slice = "system-clamav.slice";
};
};
@ -275,6 +283,7 @@ in
serviceConfig = {
Type = "oneshot";
ExecStart = "${cfg.package}/bin/clamdscan --multiscan --fdpass --infected --allmatch ${lib.concatStringsSep " " cfg.scanner.scanDirectories}";
Slice = "system-clamav.slice";
};
};
};