From 8099c11a121f47bd3a54fab7b6c53fa162c830bc Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Fri, 4 Feb 2022 01:53:47 +0300 Subject: fix(tazjin/tverskoy): Downgrade strongswan to 5.9.4 Comments contain all the relevant info. Change-Id: I6d4a715889b562dc79148314092f698ceefcac88 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5221 Tested-by: BuildkiteCI Reviewed-by: tazjin --- users/tazjin/nixos/tverskoy/default.nix | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'users') diff --git a/users/tazjin/nixos/tverskoy/default.nix b/users/tazjin/nixos/tverskoy/default.nix index 86cc3fba68f5..19675fd4273c 100644 --- a/users/tazjin/nixos/tverskoy/default.nix +++ b/users/tazjin/nixos/tverskoy/default.nix @@ -25,6 +25,12 @@ lib.fix (self: { tvl.cache.enable = true; + # Work around strongswan 5.9.4 being incompatible with servers not + # patched against some CVE. I need this for work .. + nixpkgs.overlays = [ + depot.third_party.overlays.strongswan-workaround + ]; + boot = rec { initrd.availableKernelModules = [ "nvme" "ehci_pci" "xhci_pci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ]; initrd.kernelModules = [ ]; -- cgit 1.4.1