Unverified Commit 3a4e4f6c authored by Martin Weinelt's avatar Martin Weinelt
Browse files

nixos/wyoming/piper: relax ProcSubset to all 

The onnxruntime library wants to query cpuinfo, which fails when the proc
subset is restricted.

Close: #445723
parent f2e69a0f

nixos/modules/services/home-automation/wyoming/piper.nix

+1 −1
Original line number Diff line number Diff line
@@ -190,7 +190,7 @@ in 
            ProtectKernelTunables = true;

            ProtectControlGroups = true;

            ProtectProc = "invisible";

            ProcSubset = "pid";

            ProcSubset = "all"; # for onnxruntime, which queries cpuinfo

            RestrictAddressFamilies = [

              "AF_INET"

              "AF_INET6"