allow mcp to read systemd logs

2026-03-29 18:00:48 -07:00
parent 07a9463097
commit c2882fcd8b
1 changed files with 1 additions and 0 deletions
--- a/configs/mcp.nix
+++ b/configs/mcp.nix
@@ -16,6 +16,7 @@ in
    shell = pkgs.shadow; # nologin equivalent
    subUidRanges = [{ startUid = 100000; count = 65536; }];
    subGidRanges = [{ startGid = 100000; count = 65536; }];
+    extraGroups = [ "systemd-journal" ];
    linger = true;
  };