security.isolate.cgRoot

NixOS option

Control group which subgroups are placed under. Either an explicit path to a subdirectory in cgroupfs, or “auto:file” to read the path from “file”, where it is put by isolate-cg-helper.

type: string
Default
"auto:/run/isolate/cgroup"
declared in: nixos/modules/security/isolate.nixView source on NixOS/nixpkgs →