about summary refs log tree commit diff
path: root/nixos/modules/profiles
diff options
context:
space:
mode:
authortalyz <kim.lindberger@gmail.com>2021-01-04 16:03:29 +0100
committertalyz <kim.lindberger@gmail.com>2021-01-04 16:03:29 +0100
commit0f0d5c0c49d2352e9f12cb9dc9b1d0ad548643fe (patch)
tree44c2f9e2d4ed78ec18f52f59380808e52673767b /nixos/modules/profiles
parente326297f6c8d01d996219c796245b061d61b1eb0 (diff)
profiles/hardened: Add note about potential instability
Enabling the profile can lead to hard-to-debug issues, which should be
warned about in addition to the cost in features and performance.

See https://github.com/NixOS/nixpkgs/issues/108262 for an example.
Diffstat (limited to 'nixos/modules/profiles')
-rw-r--r--nixos/modules/profiles/hardened.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/nixos/modules/profiles/hardened.nix b/nixos/modules/profiles/hardened.nix
index 42ed62b063044..680fa40b91195 100644
--- a/nixos/modules/profiles/hardened.nix
+++ b/nixos/modules/profiles/hardened.nix
@@ -1,5 +1,10 @@
 # A profile with most (vanilla) hardening options enabled by default,
-# potentially at the cost of features and performance.
+# potentially at the cost of stability, features and performance.
+#
+# This profile enables options that are known to affect system
+# stability. If you experience any stability issues when using the
+# profile, try disabling it. If you report an issue and use this
+# profile, always mention that you do.
 
 { config, lib, pkgs, ... }: