colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: sandbox: use --dev-bind-try for root paths; fixes mpv on moby

Browse Source
This commit is contained in:
Colin
2024-01-23 12:18:32 +00:00
parent 38fd171713
commit cce03a5dc8
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
modules/programs/sane-sandboxed
View File

@@ -144,7 +144,9 @@ firejailExec() {
## BUBBLEWRAP BACKEND ## BUBBLEWRAP BACKEND
bwrapIngestRootPath() { bwrapIngestRootPath() {
bwrapFlags+=("--dev-bind" "$1" "$1") # N.B.: use --dev-bind-try instead of --dev-bind for platform-specific paths like /run/opengl-driver-32
# which don't exist on aarch64, as the -try variant will gracefully fail (i.e. not bind it).
bwrapFlags+=("--dev-bind-try" "$1" "$1")
} }
bwrapIngestHomePath() { bwrapIngestHomePath() {
bwrapFlags+=("--dev-bind" "$HOME/$1" "$HOME/$1") bwrapFlags+=("--dev-bind" "$HOME/$1" "$HOME/$1")