colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

bunpen: plumb pasta related arguments into make-sandboxed

Browse Source 
for testing only: these options don't yet have the intended effect
This commit is contained in:
Colin
2024-09-19 23:54:43 +00:00
parent 2a4043523d
commit 8979ff0eec
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
modules/programs/make-sandbox-args.nix
View File

@@ -34,6 +34,7 @@ let
bunpenGenerators = { bunpenGenerators = {
autodetectCliPaths = style: [ "--bunpen-autodetect" style ]; autodetectCliPaths = style: [ "--bunpen-autodetect" style ];
capability = cap: [ "--bunpen-cap" cap ]; capability = cap: [ "--bunpen-cap" cap ];
dns = addr: [ "--bunpen-dns" addr ];
keepIpc = [ "--bunpen-keep-ipc" ]; keepIpc = [ "--bunpen-keep-ipc" ];
keepPids = [ "--bunpen-keep-pid" ]; keepPids = [ "--bunpen-keep-pid" ];
method = m: assert m == "bunpen"; method = m: assert m == "bunpen";
@@ -53,7 +54,8 @@ let
"stderr" "stderr"
# bwrap also does some stuff for /dev/{console,core,ptmx,pts,shm}, i don't need those (yet?) # bwrap also does some stuff for /dev/{console,core,ptmx,pts,shm}, i don't need those (yet?)
]); ]);
netDev = n: assert n == "all"; [ "--bunpen-keep-net" ]; netDev = n: if n == "all" then [ "--bunpen-keep-net" ] else [ "--bunpen-net-dev" n ];
netGateway = netGateway: [ "--bunpen-net-gateway" netGateway ];
path = p: [ "--bunpen-path" p ]; path = p: [ "--bunpen-path" p ];
path-home = p: [ "--bunpen-home-path" p ]; path-home = p: [ "--bunpen-home-path" p ];
path-run = p: [ "--bunpen-run-path" p ]; path-run = p: [ "--bunpen-run-path" p ];