dsg/vmsilo
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: add dup3, getsockname, symlink to GPU seccomp allowlist

Browse source 
These syscalls were being denied in enforcing mode, causing GPU device
units to fail.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Davíð Steinn Geirsson 2026-03-21 15:13:35 +00:00
parent d3d869c1ab
commit d486c7ee0c
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/services.nix
View file

@ -74,6 +74,7 @@ let
"connect"
"dup"
"dup2"
"dup3"
"epoll_create1"
"epoll_ctl"
"epoll_pwait"
@ -101,6 +102,7 @@ let
"getrandom"
"getresgid"
"getresuid"
"getsockname"
"getsockopt"
"gettid"
"gettimeofday"
@ -168,6 +170,7 @@ let
"stat"
"statfs"
"statx"
"symlink"
"sysinfo"
"tgkill"
"uname"