systemd.services.<name>.confinement.fullUnit
Whether to include the full closure of the systemd unit file into the chroot, instead of just the dependencies for the executables.
While it may be tempting to just enable this option to
make things work quickly, please be aware that this might add paths
to the closure of the chroot that you didn't anticipate. It's better
to use confinement.packages to explicitly add additional store paths to the
chroot.
- Type
boolean- Default
false- Declared
- <nixpkgs/nixos/modules/security/systemd-confinement.nix>