From 6d3d005fca3a12c5fe39fb5361ef37ede7a787f9 Mon Sep 17 00:00:00 2001 From: Jeff Henson Date: Thu, 27 Apr 2023 19:30:43 -0600 Subject: [PATCH] Allow the setrlimit syscall - #1961 (#2333) This appears to be used by newer go versions and navidrome fails to start unless it's allowed. Signed-off-by: Jeff Henson --- contrib/navidrome.service | 1 + 1 file changed, 1 insertion(+) diff --git a/contrib/navidrome.service b/contrib/navidrome.service index 66f65203429..817ab044c6b 100644 --- a/contrib/navidrome.service +++ b/contrib/navidrome.service @@ -38,6 +38,7 @@ RestrictNamespaces=yes RestrictRealtime=yes SystemCallFilter=@system-service SystemCallFilter=~@privileged @resources +SystemCallFilter=setrlimit SystemCallArchitectures=native UMask=0066