configs/hardened: set allocator to libc for everything

also fmt
This commit is contained in:
Aaron Bieber 2024-01-25 18:22:36 -07:00
parent eeeb404c56
commit e08c0342b4
No known key found for this signature in database
5 changed files with 26 additions and 22 deletions

View File

@ -1,7 +1,7 @@
{ lib, ... }:
with lib; {
environment = {
memoryAllocator.provider = mkDefault "scudo";
memoryAllocator.provider = mkDefault "libc";
variables.SCUDO_OPTIONS = mkDefault "ZeroContents=1";
};

View File

@ -1,7 +1,6 @@
{ config
, lib
, pkgs
, isUnstable
, xinlib
, ...
}:
@ -207,7 +206,8 @@ in
# "services/home-automation/home-assistant.nix"
#];
environment.systemPackages = with pkgs; [
environment = {
systemPackages = with pkgs; [
tmux
mosh
apg
@ -216,6 +216,7 @@ in
glowing-bear
rtl_433
];
};
security.acme = {
acceptTerms = true;

View File

@ -2,22 +2,27 @@
{
imports =
[ (modulesPath + "/installer/scan/not-detected.nix")
[
(modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "usb_storage" "ums_realtek" "sd_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ ];
boot.extraModulePackages = [ ];
boot = {
initrd = {
availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "usb_storage" "ums_realtek" "sd_mod" ];
kernelModules = [ ];
};
kernelModules = [ ];
extraModulePackages = [ ];
};
fileSystems."/" =
{ device = "/dev/disk/by-uuid/d97f80ac-63fe-43d3-a3f5-3c385a41a068";
{
device = "/dev/disk/by-uuid/d97f80ac-63fe-43d3-a3f5-3c385a41a068";
fsType = "ext4";
};
swapDevices =
[ { device = "/dev/disk/by-uuid/b70a6cac-996e-4a05-a3d0-17c7acf90f08"; }
];
[{ device = "/dev/disk/by-uuid/b70a6cac-996e-4a05-a3d0-17c7acf90f08"; }];
networking.useDHCP = lib.mkDefault true;

View File

@ -225,7 +225,6 @@ in
};
environment = {
memoryAllocator.provider = "mimalloc";
systemPackages = with pkgs; [
inetutils

View File

@ -1,5 +1,4 @@
{ pkgs
, config
, lib
, modulesPath
, ...