Unverified Commit 6d5a6cab authored by e1mo's avatar e1mo Committed by Martin Weinelt
Browse files

nixos/pretix: Fix pdf generation 

Previously, pdftk (part of the ticket, badge, ... generation pipeline)
would fail with:

```
Error occurred during initialization of VM
Failed to mark memory page as executable - check if grsecurity/PaX is enabled
```
Thise caused pdf generation to fail.

Since pdftk is a java application and, according to systemd.exec(5),

 > Note that [MemoryDenyWriteExecute=] is incompatible with programs and
 > libraries that generate program code dynamically at runtime, including
 > JIT execution engines, executable stacks, and code "trampoline" featu
 > re of various C compilers.

Disabling `MemoryDenyWriteExecute=` fixes it.
parent c08b1854

nixos/modules/services/web-apps/pretix.nix

+1 −1
Original line number Diff line number Diff line
@@ -479,7 +479,7 @@ in 
          CapabilityBoundingSet = [ "" ];

          DevicePolicy = "closed";

          LockPersonality = true;

          MemoryDenyWriteExecute = true;

          MemoryDenyWriteExecute = false; # required by pdftk

          NoNewPrivileges = true;

          PrivateDevices = true;

          PrivateTmp = true;