asmir/nixos_flake_config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixy/kernel: set hardened kern ver and add unprivileged_userns_clone needed for chromium

Browse Source
This commit is contained in:
Asmir A 2025-08-30 10:27:56 +02:00
parent 9b58967454
commit 82e45af049
Signed by: asmir
GPG Key ID: 020C42B7A9ABA3E2
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nixy/configuration.nix
View File

@ -89,10 +89,11 @@ in
"amdgpu.sg_display=0" "amdgpu.sg_display=0"
"amdgpu.gttsize=2048" "amdgpu.gttsize=2048"
]; ];
kernelPackages = pkgs.linuxPackages_latest; kernelPackages = pkgs.linuxPackages_hardened;
kernel.sysctl = { kernel.sysctl = {
"net.core.default_qdisc" = "fq"; "net.core.default_qdisc" = "fq";
"net.ipv4.tcp_congestion_control" = "bbr"; "net.ipv4.tcp_congestion_control" = "bbr";
"kernel.unprivileged_userns_clone" = "1"; /* Needed with harderned kernel */
}; };
loader.efi.canTouchEfiVariables = true; loader.efi.canTouchEfiVariables = true;
loader.systemd-boot = { loader.systemd-boot = {