Merge pull request #328838 from NixOS/backport-320075-to-release-24.05

This commit is contained in:
Franz Pletz 2024-07-21 09:09:27 +02:00 committed by GitHub
commit 83887abeed
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -70,6 +70,14 @@ with lib;
hostName = mkIf (!cfg.manageHostName) (mkForce "");
};
# unprivileged LXCs can't set net.ipv4.ping_group_range
security.wrappers.ping = mkIf (!cfg.privileged) {
owner = "root";
group = "root";
capabilities = "cap_net_raw+p";
source = "${pkgs.iputils.out}/bin/ping";
};
services.openssh = {
enable = mkDefault true;
startWhenNeeded = mkDefault true;