Commit e50595fd authored by Ananth Bhaskararaman's avatar Ananth Bhaskararaman
Browse files

nixos/prometheus-libvirt-exporter: fix systemd socket restrictions 

Allow AF_UNIX, AF_INET, and AF_INET6 address families so the exporter
can connect to the libvirt socket and serve HTTP metrics.
parent a517010c

nixos/modules/services/monitoring/prometheus/exporters/libvirt.nix

+5 −0
Original line number Diff line number Diff line
@@ -24,6 +24,11 @@ in 
        --web.listen-address ${cfg.listenAddress}:${toString cfg.port} \

        --libvirt.uri ${cfg.libvirtUri} ${lib.concatStringsSep " " cfg.extraFlags}

      '';

      RestrictAddressFamilies = [

        "AF_UNIX"

        "AF_INET"

        "AF_INET6"

      ];

    };

  };

}