prometheus-node-exporter service: run as nobody again

Using DynamicUser breaks the systemd and logind collectors.

cc #30535
This commit is contained in:
Franz Pletz 2017-10-25 17:49:40 +02:00
parent b3dc24c8c8
commit 63bbada520
No known key found for this signature in database
GPG key ID: 846FDED7792617B4

View file

@ -69,8 +69,8 @@ in {
${concatStringsSep " \\\n " cfg.extraFlags}
'';
serviceConfig = {
DynamicUser = true;
Restart = "always";
User = "nobody";
Restart = "always";
PrivateTmp = true;
WorkingDirectory = /tmp;
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";