colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: delfin: sandbox with bwrap

Browse Source
This commit is contained in:
Colin 2024-02-05 20:44:47 +00:00
parent 568a72f6a4
commit cab346f3ad
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/programs/assorted.nix
View File

@ -229,6 +229,9 @@ in
cargo.persist.byStore.plaintext = [ ".cargo" ];
# auth token, preferences
delfin.sandbox.method = "bwrap";
delfin.sandbox.wrapperType = "wrappedDerivation";
delfin.sandbox.whitelistDri = true;
delfin.persist.byStore.private = [ ".config/delfin" ];
# creds, but also 200 MB of node modules, etc