sane-vpn: switch back to bwrap instead of pasta

2024-08-04 18:56:17 +00:00
parent 9f3a13eeb8
commit 54e9d4a0ae
1 changed files with 3 additions and 1 deletions
--- a/pkgs/additional/sane-scripts/src/sane-vpn
+++ b/pkgs/additional/sane-scripts/src/sane-vpn
@@ -234,7 +234,9 @@ def vpn_do(config: VpnConfig, cmd: list[str]) -> None:

    wrapped_cmd = [
        "sanebox",
-        "--sanebox-method", "pastaonly",
+        # method: pastaonly, should be enough, but it leaves us as root in the user namespace.
+        # some apps don't like that -- bwrap is the fix to have uid mapping
+        "--sanebox-method", "bwrap",
        "--sanebox-keep-namespace", "all",
        "--sanebox-path", "/",
        "--sanebox-no-portal",