diff options
author | Martin Wurm <martin.wurm@mart-w.de> | 2022-03-17 19:35:20 +0100 |
---|---|---|
committer | Martin Wurm <martin.wurm@mart-w.de> | 2022-03-17 19:35:20 +0100 |
commit | fd2215b20c295a5c914822599a50533439d39880 (patch) | |
tree | 523f363f7762d1c55a8ae7c07b457804b7e4861d /nixos/modules | |
parent | dd8cebebbf0f9352501f251ac37b851d947f92dc (diff) |
nixos/paperless-ng: fix #164615
Add an exception to the `paperless-ng-server` service's
`SystemCallFilter` as the `mbind` syscall is needed when consuming a
document while having a classification model present.
Diffstat (limited to 'nixos/modules')
-rw-r--r-- | nixos/modules/services/misc/paperless-ng.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/misc/paperless-ng.nix b/nixos/modules/services/misc/paperless-ng.nix index 44efc234a2b3..11e44f5ece57 100644 --- a/nixos/modules/services/misc/paperless-ng.nix +++ b/nixos/modules/services/misc/paperless-ng.nix @@ -214,6 +214,8 @@ in User = cfg.user; ExecStart = "${cfg.package}/bin/paperless-ng qcluster"; Restart = "on-failure"; + # The `mbind` syscall is needed for running the classifier. + SystemCallFilter = defaultServiceConfig.SystemCallFilter ++ [ "mbind" ]; }; environment = env; wantedBy = [ "multi-user.target" ]; |