From 9c293b33e0eaa1f427bbd4c5a7cb2bd165564d71 Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Thu, 24 Apr 2025 19:24:49 +0200
Subject: modules/sharkey: Ensure, that it can access the host's CPUs

This is, for some reason, needed for image uploads to sharkey.
---
 modules/by-name/sh/sharkey/module.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'modules/by-name/sh')

diff --git a/modules/by-name/sh/sharkey/module.nix b/modules/by-name/sh/sharkey/module.nix
index a2f5445..29bae51 100644
--- a/modules/by-name/sh/sharkey/module.nix
+++ b/modules/by-name/sh/sharkey/module.nix
@@ -242,7 +242,8 @@ in {
         MemoryDenyWriteExecute = false;
         PrivateDevices = true;
         PrivateUsers = true;
-        ProcSubset = "pid";
+        # Sharkey needs access to the hosts CPUs
+        ProcSubset = "all";
         PrivateTmp = true;
         ProtectClock = true;
         ProtectControlGroups = true;
-- 
cgit 1.4.1