lldpd: 0.9.7 -> 0.9.8
Now uses the upstream systemd unit which adds lots of hardening flags.
This commit is contained in:
parent
7c696a08ce
commit
951106c650
@ -28,16 +28,11 @@ in
|
|||||||
users.extraGroups._lldpd = {};
|
users.extraGroups._lldpd = {};
|
||||||
|
|
||||||
environment.systemPackages = [ pkgs.lldpd ];
|
environment.systemPackages = [ pkgs.lldpd ];
|
||||||
|
systemd.packages = [ pkgs.lldpd ];
|
||||||
|
|
||||||
systemd.services.lldpd = {
|
systemd.services.lldpd = {
|
||||||
wantedBy = [ "multi-user.target" ];
|
wantedBy = [ "multi-user.target" ];
|
||||||
after = [ "network.target" ];
|
environment.LLDPD_OPTIONS = concatStringsSep " " cfg.extraArgs;
|
||||||
requires = [ "network.target" ];
|
|
||||||
serviceConfig = {
|
|
||||||
ExecStart = "${pkgs.lldpd}/bin/lldpd -d ${concatStringsSep " " cfg.extraArgs}";
|
|
||||||
PrivateTmp = true;
|
|
||||||
PrivateDevices = true;
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
@ -3,17 +3,18 @@
|
|||||||
|
|
||||||
stdenv.mkDerivation rec {
|
stdenv.mkDerivation rec {
|
||||||
name = "lldpd-${version}";
|
name = "lldpd-${version}";
|
||||||
version = "0.9.7";
|
version = "0.9.8";
|
||||||
|
|
||||||
src = fetchurl {
|
src = fetchurl {
|
||||||
url = "https://media.luffy.cx/files/lldpd/${name}.tar.gz";
|
url = "https://media.luffy.cx/files/lldpd/${name}.tar.gz";
|
||||||
sha256 = "1f0d5s4643pjmgycc5ssgl1pggyq5a7navhabkyhcg0aqdah6dmr";
|
sha256 = "0kwck17cr2f1a395a8bfmj7fz1n4i1hv429cbdbkhff33glr9r4y";
|
||||||
};
|
};
|
||||||
|
|
||||||
configureFlags = [
|
configureFlags = [
|
||||||
"--localstatedir=/var"
|
"--localstatedir=/var"
|
||||||
"--enable-pie"
|
"--enable-pie"
|
||||||
"--with-snmp"
|
"--with-snmp"
|
||||||
|
"--with-systemdsystemunitdir=\${out}/lib/systemd/system"
|
||||||
];
|
];
|
||||||
|
|
||||||
nativeBuildInputs = [ pkgconfig removeReferencesTo ];
|
nativeBuildInputs = [ pkgconfig removeReferencesTo ];
|
||||||
|
Loading…
Reference in New Issue
Block a user