programs: ship exiftool

hosts/by-name/servo/services/pleroma.nix

@@ -135,7 +135,7 @@ in
     # something inside pleroma invokes `sh` w/o specifying it by path, so this is needed to allow pleroma to start
     pkgs.bash
     # used by Pleroma to strip geo tags from uploads
-    pkgs.exiftool
+    config.sane.programs.exiftool.package
     # i saw some errors when pleroma was shutting down about it not being able to find `awk`. probably not critical
     pkgs.gawk
     # needed for email operations like password reset

hosts/common/programs/assorted.nix

@@ -127,6 +127,7 @@ in
       # "dmidecode"
       "dtrx"  # `unar` alternative, "Do The Right eXtraction"
       # "efivar"
+      "exiftool"
       "eza"  # a better 'ls'
       # "flashrom"
       "git"  # needed as a user package, for config.

hosts/common/programs/default.nix

@@ -41,6 +41,7 @@
     ./epiphany.nix
     ./errno.nix
     ./evince.nix
+    ./exiftool.nix
     ./fcitx5.nix
     ./feedbackd.nix
     ./firefox.nix

hosts/common/programs/exiftool.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  sane.programs.exiftool = {
+    sandbox.method = "bwrap";
+    sandbox.autodetectCliPaths = "existingFile";
+  };
+}

hosts/common/programs/sane-scripts.nix

@@ -218,6 +218,9 @@ in
     "sane-scripts.sync-music" = {};
     "sane-scripts.sync-from-iphone" = {};
 
+    "sane-scripts.tag-music".suggestedPrograms = [
+      "exiftool"  #< for (slightly) better sandboxing than default exiftool
+    ];
     "sane-scripts.tag-music".sandbox = {
       method = "bwrap";
       autodetectCliPaths = "existing";