nixos/modules/programs/dublin-traceroute.nix

   1 { config, lib, pkgs, ... }:
   2
   3 let
   4   cfg = config.programs.dublin-traceroute;
   5
   6 in {
   7   meta.maintainers = pkgs.dublin-traceroute.meta.maintainers;
   8
   9   options = {
  10     programs.dublin-traceroute = {
  11       enable = lib.mkEnableOption "dublin-traceroute (including setcap wrapper)";
  12
  13       package = lib.mkPackageOption pkgs "dublin-traceroute" { };
  14     };
  15   };
  16
  17   config = lib.mkIf cfg.enable {
  18     environment.systemPackages = [ cfg.package ];
  19
  20     security.wrappers.dublin-traceroute = {
  21       owner = "root";
  22       group = "root";
  23       capabilities = "cap_net_raw+p";
  24       source = lib.getExe cfg.package;
  25     };
  26   };
  27 }