programs: kdenlive: sandbox with bwrap

This commit is contained in:
Colin 2024-02-05 22:01:34 +00:00
parent bfc0eadfaa
commit 7d833ebf76

View File

@ -1,6 +1,19 @@
{ pkgs, ... }:
{
sane.programs.kdenlive = {
sandbox.method = "bwrap";
sandbox.wrapperType = "wrappedDerivation";
sandbox.extraHomePaths = [
"Music"
"Pictures" # i have some videos in there too.
"Videos"
"tmp"
];
sandbox.extraPaths = [
"/mnt/servo-media/Pictures"
"/mnt/servo-media/Videos"
];
sandbox.whitelistDri = true;
packageUnwrapped = pkgs.kdenlive.override {
ffmpeg-full = pkgs.ffmpeg-full.override {
# avoid expensive samba build for a feature i don't use