nixos/crowdsec: Failed to start Update the crowdsec hub index

[jarppiko]

Nixpkgs version

• Stable (25.11)

Describe the bug

crowdsec-update-hub.service (part of crowdsec package fails to update hub index. It might be that the ExecStartPost fails:

# crowdsec-update-hub.service
ExecStart=/nix/store/l6fyi5gp6f4zigkby622z07kf4llw68r-cscli/bin/cscli --error hub update

Since the unit runs as User=crowdsec, it might not be able to reload a system service.

Steps to reproduce

1. Install crowdsec.service (services.crowedsec.enable)
2. Check logs: journalctl -u crowdsec-update-hub.service

Expected behaviour

crowdsec.service is successfully reloaded after updating Crowdsec Hub

Screenshots

No response

Relevant log output

# journalctl -u crowdsec-update-hub.service
-- Boot c9a01dfd5cec429a8fe1da1f315731c0 --
Jan 03 00:00:37 portti systemd[1]: Starting Update the crowdsec hub index...
Jan 03 00:00:38 portti systemctl[18178]: Failed to reload crowdsec.service: Access denied
Jan 03 00:00:38 portti systemctl[18178]: See system logs and 'systemctl status crowdsec.service' for details.
Jan 03 00:00:38 portti systemd[1]: crowdsec-update-hub.service: Control process exited, code=exited, status=4/NOPERMISSION
Jan 03 00:00:38 portti systemd[1]: crowdsec-update-hub.service: Failed with result 'exit-code'.
Jan 03 00:00:38 portti systemd[1]: Failed to start Update the crowdsec hub index.
Jan 03 00:00:38 portti systemd[1]: crowdsec-update-hub.service: Consumed 513ms CPU time, 41.4M memory peak, 7K incoming IP traffic, 2.7K outgoing IP traffic.
Jan 04 00:04:38 portti systemd[1]: Starting Update the crowdsec hub index...
Jan 04 00:04:39 portti systemctl[45351]: Failed to reload crowdsec.service: Access denied
Jan 04 00:04:39 portti systemctl[45351]: See system logs and 'systemctl status crowdsec.service' for details.
Jan 04 00:04:39 portti systemd[1]: crowdsec-update-hub.service: Control process exited, code=exited, status=4/NOPERMISSION
Jan 04 00:04:39 portti systemd[1]: crowdsec-update-hub.service: Failed with result 'exit-code'.
Jan 04 00:04:39 portti systemd[1]: Failed to start Update the crowdsec hub index.
Jan 04 00:04:39 portti systemd[1]: crowdsec-update-hub.service: Consumed 499ms CPU time, 107.1M memory peak, 72.4M read from disk, 6.8K incoming IP traffic, 2.5K outgoing IP traffic.

Additional context

No response

System metadata

• system: "x86_64-linux"
• host os: Linux 6.18.2, NixOS, 25.11 (Xantusia), 25.11.3064.64049ca74d63
• multi-user?: yes
• sandbox: yes
• version: nix-env (Nix) 2.31.2
• channels(root): "home-manager-25.11.tar.gz, nixos-25.11, nixos-unstable"
• nixpkgs: /nix/store/lxfwbq8lv7jwsfbqmr28fmj6v4b8hqnb-nixos-25.11/nixos

Notify maintainers

Hola @TornaxO7 @M0ustach3

Note for maintainers: Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE

I assert that this issue is relevant for Nixpkgs

• I assert that this is a bug and not a support request.
• I assert that this is not a duplicate of an existing issue.
• I assert that I have read the NixOS Code of Conduct and agree to abide by it.

Is this issue important to you?

Add a 👍 reaction to issues you find important.

[TornaxO7]

Hi! If I'm seeing that correctly, this is already fixed in #446307 and also already posted here: #473707