colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: handbrake: sandbox with bwrap

Browse Source
This commit is contained in:
Colin
2024-02-05 22:28:15 +00:00
parent ddc41bc9d8
commit 6eb2a3d67f
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
hosts/common/programs/handbrake.nix
View File

@@ -1,6 +1,20 @@
{ pkgs, ... }: { pkgs, ... }:
{ {
sane.programs.handbrake = { sane.programs.handbrake = {
sandbox.method = "bwrap"; #< landlock would be better (prevents output to tmp dirs), but needs work for /mnt/servo-media to function.
sandbox.wrapperType = "wrappedDerivation";
sandbox.extraHomePaths = [
"Music"
"Pictures" # i have some videos in there too.
"Videos"
"tmp"
];
sandbox.extraPaths = [
"/mnt/servo-media/Pictures"
"/mnt/servo-media/Videos"
];
sandbox.autodetectCliPaths = true;
# disable expensive sambda dependency; i don't use it. # disable expensive sambda dependency; i don't use it.
packageUnwrapped = pkgs.handbrake.override { packageUnwrapped = pkgs.handbrake.override {
ffmpeg_5-full = pkgs.ffmpeg_5-full.override { ffmpeg_5-full = pkgs.ffmpeg_5-full.override {