about summary refs log tree commit diff
path: root/nixos/tests/common
diff options
context:
space:
mode:
authorEmily <vcs@emily.moe>2020-03-23 17:58:36 +0000
committerEmily <vcs@emily.moe>2020-04-18 05:15:47 +0100
commit695fd78ac45763b02ae4c68abda28974bb72c96b (patch)
treecfcc35adf4be1ababcc06e1506fd0407227ad701 /nixos/tests/common
parentd0f04c1623ae74f256ff5ced77ac78c7fe3b6abc (diff)
downloadnixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.tar
nixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.gz
nixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.bz2
nixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.lz
nixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.xz
nixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.zst
nixlib-695fd78ac45763b02ae4c68abda28974bb72c96b.zip
nixos/tests/acme: use CAP_NET_BIND_SERVICE
Diffstat (limited to 'nixos/tests/common')
-rw-r--r--nixos/tests/common/acme/server/default.nix3
1 files changed, 1 insertions, 2 deletions
diff --git a/nixos/tests/common/acme/server/default.nix b/nixos/tests/common/acme/server/default.nix
index fdc053a2d828..1d6c2cc9d30a 100644
--- a/nixos/tests/common/acme/server/default.nix
+++ b/nixos/tests/common/acme/server/default.nix
@@ -126,8 +126,7 @@ in {
         '';
         serviceConfig = {
           # Required to bind on privileged ports.
-          User = "root";
-          Group = "root";
+          AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
         };
       };
     };