From 366e2c34a310f66c625ba264275f4a848b3edabb Mon Sep 17 00:00:00 2001
From: magic_rb <magic_rb@redalder.org>
Date: Fri, 3 Nov 2023 20:12:03 +0100
Subject: [PATCH] Apply kernel patch for NFSv4 SELinux issue

Signed-off-by: magic_rb <magic_rb@redalder.org>
---
 nixos/systems/omen/hardware.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/nixos/systems/omen/hardware.nix b/nixos/systems/omen/hardware.nix
index 670e085..f2b80a9 100644
--- a/nixos/systems/omen/hardware.nix
+++ b/nixos/systems/omen/hardware.nix
@@ -17,6 +17,15 @@ in
   hardware.cpu.intel.updateMicrocode = true;
 
   boot = {
+    kernelPatches = [
+      {
+        name = "selinux-nfs4-patch";
+        patch = pkgs.fetchpatch {
+          url = "https://patchwork.kernel.org/project/selinux/patch/20230911142358.883728-1-omosnace@redhat.com/raw/";
+          hash = "sha256-m947t39xr4VqJBZ2mYTFq9Up/NWlwueH8aXFZRQwA7c=";
+        };
+      }
+    ];
     initrd.systemd.enable = true;
     initrd.availableKernelModules = [
       "xhci_pci"