Skip to content

Commit

Permalink
nixos/postgresql: MemoryDenyWriteExecute must be off when doing JIT
Browse files Browse the repository at this point in the history
The test breaks like this otherwise:

    machine # WARNING:  error during JITing: Permission denied
    machine # [   14.012280] postgres[913]: [913] WARNING:  error during JITing: Permission denied
    machine # ERROR:  failed to look up symbol "evalexpr_0_1": Failed to materialize symbols: { (main, { evalexpr_0_1, evalexpr_0_0 }) }
  • Loading branch information
Ma27 authored and mweinelt committed Oct 1, 2024
1 parent f800d8e commit 4083be3
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion nixos/modules/services/databases/postgresql.nix
Original file line number Diff line number Diff line change
Expand Up @@ -630,7 +630,7 @@ in
PrivateTmp = true;
ProtectHome = true;
ProtectSystem = "strict";
MemoryDenyWriteExecute = true;
MemoryDenyWriteExecute = lib.mkDefault (config.services.postgresql.settings.jit == "off");
NoNewPrivileges = true;
LockPersonality = true;
PrivateDevices = true;
Expand Down

0 comments on commit 4083be3

Please sign in to comment.