diff options
| author | rnhmjoj <rnhmjoj@inventati.org> | 2021-09-22 11:06:17 +0200 |
|---|---|---|
| committer | rnhmjoj <rnhmjoj@inventati.org> | 2021-09-22 11:20:30 +0200 |
| commit | 1f55c7e02213082673f7b6d09a1efaf16be5a794 (patch) | |
| tree | cf256b88461fd00b4660fb8d35ae711d65b59cc5 /nixos/tests/hardened.nix | |
| parent | 88b3c29cf1ddb7582b11d89af16b750e44b5bc67 (diff) | |
| download | nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.tar nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.tar.gz nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.tar.bz2 nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.tar.lz nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.tar.xz nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.tar.zst nixpkgs-1f55c7e02213082673f7b6d09a1efaf16be5a794.zip | |
nixos/tests: drop latestKernel.hardened
The latest kernel does not guarantee a hardened version anymore, see ga5341beb for the motivation.
Diffstat (limited to 'nixos/tests/hardened.nix')
| -rw-r--r-- | nixos/tests/hardened.nix | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/nixos/tests/hardened.nix b/nixos/tests/hardened.nix index b76ae83a328..da7e0972e13 100644 --- a/nixos/tests/hardened.nix +++ b/nixos/tests/hardened.nix @@ -1,4 +1,4 @@ -import ./make-test-python.nix ({ pkgs, latestKernel ? false, ... } : { +import ./make-test-python.nix ({ pkgs, ... } : { name = "hardened"; meta = with pkgs.lib.maintainers; { maintainers = [ joachifm ]; @@ -10,8 +10,6 @@ import ./make-test-python.nix ({ pkgs, latestKernel ? false, ... } : { { users.users.alice = { isNormalUser = true; extraGroups = [ "proc" ]; }; users.users.sybil = { isNormalUser = true; group = "wheel"; }; imports = [ ../modules/profiles/hardened.nix ]; - boot.kernelPackages = - lib.mkIf latestKernel pkgs.linuxPackages_latest_hardened; environment.memoryAllocator.provider = "graphene-hardened"; nix.useSandbox = false; virtualisation.emptyDiskImages = [ 4096 ]; |