about summary refs log tree commit diff
path: root/nixos/modules/security
diff options
context:
space:
mode:
authorEelco Dolstra <edolstra@gmail.com>2017-04-04 14:18:49 +0200
committerEelco Dolstra <edolstra@gmail.com>2017-04-04 15:13:49 +0200
commit01dbf03628fbddff46b60354407d23497c25a566 (patch)
tree74039d65eb05cec1e30987d4f979299418754dab /nixos/modules/security
parent3a9c217804688668404ebfe9a199e6e85297a3a7 (diff)
network-link-*.service: Set stopIfChanged = false
This reduces the time window during which IP addresses are gone during
switch-to-configuration. A complication is that with stopIfChanged =
true, preStop would try to delete the *new* IP addresses rather than
the old one (since the preStop script now runs after the switch to the
new configuration). So we now record the actually configured addresses
in /run/nixos/network/addresses/<interface>. This is more robust in
any case.

Issue https://github.com/NixOS/nixops/issues/640.
Diffstat (limited to 'nixos/modules/security')
-rw-r--r--nixos/modules/security/polkit.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/security/polkit.nix b/nixos/modules/security/polkit.nix
index 8d9d53480630c..7e59408a5b0b3 100644
--- a/nixos/modules/security/polkit.nix
+++ b/nixos/modules/security/polkit.nix
@@ -64,7 +64,7 @@ in
     systemd.packages = [ pkgs.polkit.out ];
 
     systemd.services.polkit.restartTriggers = [ config.system.path ];
-    systemd.services.polkit.unitConfig.X-StopIfChanged = false;
+    systemd.services.polkit.stopIfChanged = false;
 
     # The polkit daemon reads action/rule files
     environment.pathsToLink = [ "/share/polkit-1" ];