about summary refs log tree commit diff
path: root/nixos/modules/services/monitoring
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2017-02-15 06:34:20 +0100
committerFranz Pletz <fpletz@fnordicwalking.de>2017-02-15 09:35:27 +0100
commit188526da3da7162be11e7cc4e46e64d4279b834b (patch)
treec22b7bb525d8cd67df49122117d2e2b214f5657b /nixos/modules/services/monitoring
parenta73afa89b402f969d9ed2e0d71dc2a19c80aaa72 (diff)
downloadnixlib-188526da3da7162be11e7cc4e46e64d4279b834b.tar
nixlib-188526da3da7162be11e7cc4e46e64d4279b834b.tar.gz
nixlib-188526da3da7162be11e7cc4e46e64d4279b834b.tar.bz2
nixlib-188526da3da7162be11e7cc4e46e64d4279b834b.tar.lz
nixlib-188526da3da7162be11e7cc4e46e64d4279b834b.tar.xz
nixlib-188526da3da7162be11e7cc4e46e64d4279b834b.tar.zst
nixlib-188526da3da7162be11e7cc4e46e64d4279b834b.zip
prometheus.blackboxExporter service: add CAP_NET_RAW
The blackbox-exporter for prometheus needs CAP_NET_RAW for sending icmp
probes.
Diffstat (limited to 'nixos/modules/services/monitoring')
-rw-r--r--nixos/modules/services/monitoring/prometheus/blackbox-exporter.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/services/monitoring/prometheus/blackbox-exporter.nix b/nixos/modules/services/monitoring/prometheus/blackbox-exporter.nix
index 7a343299c315..388e4d4ac01d 100644
--- a/nixos/modules/services/monitoring/prometheus/blackbox-exporter.nix
+++ b/nixos/modules/services/monitoring/prometheus/blackbox-exporter.nix
@@ -54,6 +54,7 @@ in {
         Restart = "always";
         PrivateTmp = true;
         WorkingDirectory = /tmp;
+        AmbientCapabilities = [ "CAP_NET_RAW" ]; # for ping probes
         ExecStart = ''
           ${pkgs.prometheus-blackbox-exporter}/bin/blackbox_exporter \
             -web.listen-address :${toString cfg.port} \