From f860b289d4d7a45c38b7dbe8f74bf0d09d86f313 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Thu, 27 Jan 2022 13:35:32 +0100 Subject: [PATCH] prometheus.exporters.smartctl: Allow RAWIO This allows the exporter to perform SCSI commands and interact with hpsa and cciss devices. --- .../services/monitoring/prometheus/exporters/smartctl.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix b/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix index b6416b93e69c..437604748b3e 100644 --- a/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix +++ b/nixos/modules/services/monitoring/prometheus/exporters/smartctl.nix @@ -41,9 +41,11 @@ in { serviceOpts = { serviceConfig = { AmbientCapabilities = [ + "CAP_RAW_SYSIO" "CAP_SYS_ADMIN" ]; CapabilityBoundingSet = [ + "CAP_RAW_SYSIO" "CAP_SYS_ADMIN" ]; DevicePolicy = "closed";