colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: nvme-cli: sandbox

Browse Source
This commit is contained in:
Colin 2024-02-17 14:40:29 +00:00
parent 472987f164
commit 7d1fd2f30a
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
hosts/common/programs/assorted.nix
View File

@ -651,6 +651,18 @@ in
"/proc"
];
# `nvme list` only shows results when run as root.
nvme-cli.sandbox.method = "landlock";
nvme-cli.sandbox.wrapperType = "wrappedDerivation";
nvme-cli.sandbox.extraPaths = [
"/sys/devices"
"/sys/class/nvme"
"/sys/class/nvme-subsystem"
"/sys/class/nvme-generic"
"/dev"
];
nvme-cli.sandbox.capabilities = [ "sys_rawio" ];
# settings (electron app)
obsidian.persist.byStore.plaintext = [ ".config/obsidian" ];