nixos/wyoming/piper: relax ProcSubset to all

The onnxruntime library wants to query cpuinfo, which fails when the proc
subset is restricted.

Close: #445723
This commit is contained in:
Martin Weinelt
2025-09-30 00:29:35 +02:00
parent f2e69a0fd1
commit 3a4e4f6c3d

View File

@@ -190,7 +190,7 @@ in
ProtectKernelTunables = true;
ProtectControlGroups = true;
ProtectProc = "invisible";
ProcSubset = "pid";
ProcSubset = "all"; # for onnxruntime, which queries cpuinfo
RestrictAddressFamilies = [
"AF_INET"
"AF_INET6"