about summary refs log tree commit diff
path: root/users/flokli
diff options
context:
space:
mode:
Diffstat (limited to 'users/flokli')
-rw-r--r--users/flokli/nixos/profiles/archeology.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/users/flokli/nixos/profiles/archeology.nix b/users/flokli/nixos/profiles/archeology.nix
index 85c6936732..e617441391 100644
--- a/users/flokli/nixos/profiles/archeology.nix
+++ b/users/flokli/nixos/profiles/archeology.nix
@@ -9,6 +9,12 @@
   # Start clickhose as a system service.
   services.clickhouse.enable = true;
 
+  # for ClickHouse
+  # We're keeping this here rather than in the NixOS module, because I suspect
+  # this opens up timing side channels. This is a single-user, single-purpose
+  # machine, so that isn't a concern here.
+  boot.kernel.sysctl."kernel.task_delayacct" = 1;
+
   # Enable SSH and let edef and flokli in
   services.openssh.enable = true;