16 lines
305 B
Nix
16 lines
305 B
Nix
# Can break containers and flatpaks
|
|
{ ... }:
|
|
{
|
|
config.dendritic.features.security-sysctl-userns = {
|
|
nixosModules = [
|
|
(
|
|
{ lib, ... }:
|
|
{
|
|
boot.kernel.sysctl = lib.mkForce {
|
|
"kernel.unprivileged_userns_clone" = 0;
|
|
};
|
|
}
|
|
)
|
|
];
|
|
};
|
|
}
|