pyrox.dev
1{ config
2, lib
3, pkgs
4, ...
5}:
6let
7 cfg = config.programs.pqos-wrapper;
8in
9{
10 options.programs.pqos-wrapper = {
11 enable = lib.mkEnableOption "PQoS Wrapper for BenchExec";
12 package = lib.mkPackageOption pkgs "pqos-wrapper" { };
13 };
14
15 config = lib.mkIf cfg.enable {
16 hardware.cpu.x86.msr.enable = true;
17
18 security.wrappers.${cfg.package.meta.mainProgram} = {
19 owner = "nobody";
20 group = config.hardware.cpu.x86.msr.group;
21 source = lib.getExe cfg.package;
22 capabilities = "cap_sys_rawio=eip";
23 };
24 };
25
26 meta.maintainers = with lib.maintainers; [ lorenzleutgeb ];
27}