fix(matic): pin kernel to 6.17 for Falcon sensor compatibility

Merged
SH
5mo ago
+2-2

Summary

  • Pin kernel from linuxPackages_6_18 to linuxPackages_6_17 to resolve CS_PREVENTION_MISSING on Falcon sensor 7.31.0-18410
  • Falcon's prevention kernel module fails to load on 6.18.33

Test plan

  • sudo nixos-rebuild switch and reboot
  • sudo systemctl status falcon-sensor shows active
  • sudo /opt/CrowdStrike/falconctl -g --rfm-state shows not in RFM

Summary by cubic

Pin the matic host kernel to linuxPackages_6_17 to keep CrowdStrike Falcon prevention active. Sensor 7.31.0-18410 fails to load its module on 6.18.33, causing CS_PREVENTION_MISSING.

  • Migration
    • Rebuild and reboot: sudo nixos-rebuild switch then reboot.
    • Verify service: sudo systemctl status falcon-sensor is active.
    • Confirm not in RFM: /opt/CrowdStrike/falconctl -g --rfm-state.