Merge pull request #200222 from Ma27/prometheus-hardening-regression

nixos/prometheus: fix startup w/hardened service

Changed files
+1 -1
nixos
modules
services
monitoring
prometheus
+1 -1
nixos/modules/services/monitoring/prometheus/default.nix
···
RestrictRealtime = true;
RestrictSUIDSGID = true;
SystemCallArchitectures = "native";
-
SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
};
};
# prometheus-config-reload will activate after prometheus. However, what we
···
RestrictRealtime = true;
RestrictSUIDSGID = true;
SystemCallArchitectures = "native";
+
SystemCallFilter = [ "@system-service" "~@privileged" ];
};
};
# prometheus-config-reload will activate after prometheus. However, what we