zfs: sandbox

2024-07-07 02:31:33 +00:00
parent c638218c07
commit 9f642980fd
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -1192,7 +1192,8 @@ in
    yt-dlp.sandbox.net = "all";
    yt-dlp.sandbox.whitelistPwd = true;  # saves to pwd by default

-    zfs = {};
+    zfs.sandbox.method = "landlock";  #< bwrap doesn't work
+    zfs.sandbox.extraPaths = [ "/dev" ];
  };

  sane.persist.sys.byStore.plaintext = lib.mkIf config.sane.programs.guiApps.enabled [