blob: 6a8da5bef75f7cae8aa0a85210965f861ad18f96 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
{
pkgs,
lib,
cfg,
}: {
timers.fstrim = lib.mkIf cfg.ssd {
wantedBy = ["timers.target"];
wants = ["fstrim.service"];
unitConfig = {
Description = "Discard unused blocks once a week";
Documentation = "man:fstrim";
ConditionVirtualization = "!container";
ConditionPathExists = "!/etc/initrd-release";
};
timerConfig = {
OnCalendar = "weekly";
AccuracySec = "1h";
Persistent = "true";
RandomizedDelaySec = "6000";
};
};
services.fstrim = lib.mkIf cfg.ssd {
wantedBy = lib.mkForce [];
unitConfig = {
Description = "Discard unused blocks on filesystems from /etc/fstab";
Documentation = "man:fstrim(8)";
ConditionVirtualization = "!container";
};
serviceConfig = {
Type = "oneshot";
ExecStart = "${pkgs.util-linux}/bin/fstrim --listed-in /etc/fstab:/proc/self/mountinfo --verbose --quiet-unsupported";
PrivateDevices = "no";
PrivateNetwork = "yes";
PrivateUsers = "no";
ProtectKernelTunables = "yes";
ProtectKernelModules = "yes";
ProtectControlGroups = "yes";
MemoryDenyWriteExecute = "yes";
SystemCallFilter = "@default @file-system @basic-io @system-service";
};
};
}
# vim: ts=2
|
