btrfs-progs: fix scrub sandboxing

2024-11-08 08:58:46 +00:00
parent d161cbdc72
commit 849fe87de7
1 changed files with 2 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -449,6 +449,8 @@ in
    btrfs-progs.sandbox.extraPaths = [
      "/dev/btrfs-control"
    ];
+    btrfs-progs.sandbox.tryKeepUsers = true;
+    btrfs-progs.sandbox.capabilities = [ "sys_admin" ];  # for `btrfs scrub`

    "cacert.unbundled".sandbox.enable = false;  #< data only