colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

pipewire: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-03 15:26:21 +00:00
parent 09507a04bd
commit c93f71e285
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/programs/pipewire/default.nix
View File

@@ -55,7 +55,7 @@ in
]; ];
# sandbox.method = "landlock"; #< works, including without rtkit # sandbox.method = "landlock"; #< works, including without rtkit
sandbox.method = "bwrap"; #< also works, but can't claim the full scheduling priority it wants sandbox.method = "bunpen"; #< also works, but can't claim the full scheduling priority it wants
sandbox.whitelistAudio = true; sandbox.whitelistAudio = true;
# sandbox.whitelistDbus = [ # sandbox.whitelistDbus = [
# # dbus is used for rtkit integration # # dbus is used for rtkit integration
@@ -80,6 +80,7 @@ in
"/dev/video0" "/dev/video0"
"/dev/video1" "/dev/video1"
"/dev/video2" "/dev/video2"
"/proc" #< because of isolatePids=false
]; ];
sandbox.extraHomePaths = [ sandbox.extraHomePaths = [
# pulseaudio cookie # pulseaudio cookie