colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: ripgrep: sandbox with bwrap instead of landlock

Browse Source 
this provides network isolation
This commit is contained in:
Colin 2024-02-20 23:32:54 +00:00
parent 6cf1bc5a28
commit 429d0c53e7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/ripgrep.nix
View File

@ -1,8 +1,8 @@
{ ... }:
{
sane.programs.ripgrep = {
sandbox.method = "landlock";
sandbox.wrapperType = "wrappedDerivation"; # slow to build
sandbox.method = "bwrap";
sandbox.wrapperType = "wrappedDerivation";
sandbox.autodetectCliPaths = true;
sandbox.whitelistPwd = true;