audit: Disable in containers

This barfs: Jan 18 12:46:32 machine 522i0x9l80z7gw56iahxjjsdjp0xi10q-audit-start[506]: The audit system is disabled
2016-01-26 16:25:40 +01:00
parent 981e8d5582
commit 2352e2589e
2 changed files with 6 additions and 1 deletions
@@ -93,9 +93,11 @@ in {

  config = mkIf (cfg.enable == "lock" || cfg.enable) {
    systemd.services.audit = {
-      description = "pseudo-service representing the kernel audit state";
+      description = "Kernel Auditing";
      wantedBy = [ "basic.target" ];

+      unitConfig.ConditionVirtualization = "!container";
+
      path = [ pkgs.audit ];

      serviceConfig = {