pyrox.dev
1{ config, lib, pkgs, ... }:
2
3let
4 cfg = config.programs.dublin-traceroute;
5
6in {
7 meta.maintainers = pkgs.dublin-traceroute.meta.maintainers;
8
9 options = {
10 programs.dublin-traceroute = {
11 enable = lib.mkEnableOption ''
12 dublin-traceroute, add it to the global environment and configure a setcap wrapper for it.
13 '';
14
15 package = lib.mkPackageOption pkgs "dublin-traceroute" { };
16 };
17 };
18
19 config = lib.mkIf cfg.enable {
20 environment.systemPackages = [ cfg.package ];
21
22 security.wrappers.dublin-traceroute = {
23 owner = "root";
24 group = "root";
25 capabilities = "cap_net_raw+p";
26 source = lib.getExe cfg.package;
27 };
28 };
29}