Commit Graph

578 Commits

Author SHA1 Message Date
941fff725a vulkan-tools: sandbox with bunpen 2024-09-03 04:34:19 +00:00
d478b945c4 killall: sandbox with bunpen 2024-09-03 04:26:56 +00:00
769fdcee89 tree: sandbox with bunpen 2024-09-03 04:26:06 +00:00
b0aedb6714 pstree: sandbox with bunpen 2024-09-03 04:25:20 +00:00
20e71ad800 fd: sandbox with bunpen 2024-09-03 04:23:41 +00:00
0566e237aa alsaUtils: sandbox with bunpen 2024-09-03 04:23:13 +00:00
1e81c033aa pwvucontrol: sandbox with bunpen 2024-09-03 03:32:12 +00:00
f490a49921 pulsemixer: sandbox with bunpen 2024-09-03 03:31:14 +00:00
4b52fe260c yt-dlp: sandbox with bunpen 2024-09-03 03:10:29 +00:00
c81e2fd6fa wget: sandbox with bunpen 2024-09-03 03:07:54 +00:00
1ac244d1de usbutils: sandbox with bunpen 2024-09-03 03:06:50 +00:00
f70d4b75b2 typescript-language-server: sandbox with bunpen 2024-09-03 03:06:36 +00:00
34aad6f74c python3-repl: sandbox with bunpen 2024-09-03 03:04:38 +00:00
d20359fc1d pyright: sandbox with bunpen 2024-09-03 03:01:06 +00:00
714f727f1a pavucontrol: sandbox with bunpen 2024-09-03 03:00:36 +00:00
eff8f2597c openscad-lsp: sandbox with bunpen 2024-09-03 02:59:59 +00:00
1d7a8c688a nmap: sandbox with bunpen 2024-09-03 02:59:22 +00:00
56bac1ac19 nixd: sandbox with bunpen 2024-09-03 02:58:48 +00:00
fbe00915bb nano: sandbox with bunpen 2024-09-03 02:58:23 +00:00
bf1d401b48 mercurial: document that sandboxing DOES work at present 2024-09-03 02:58:11 +00:00
424f6ef35a marksman: sandbox with bunpen 2024-09-03 02:57:24 +00:00
4637a3eee3 lua-language-server: sandbox with bunpen 2024-09-03 02:57:13 +00:00
d2e600dcf8 jq: sandbox with bunpen 2024-09-03 02:56:10 +00:00
a17369cebe sed: sandbox with bunpen 2024-09-03 02:55:34 +00:00
2d5cb84eef forkstat: document sandbox limitations 2024-09-03 02:54:27 +00:00
9050d8979e grep: sandbox with bunpen 2024-09-03 02:53:37 +00:00
15d668f1ca file: sandbox with bunpen 2024-09-03 02:48:13 +00:00
147efe0a9e dig: sandbox with bunpen 2024-09-03 02:47:32 +00:00
d11f3152d0 cargo,rust-analyzer: sandbox with bunpen 2024-09-03 02:46:54 +00:00
8a2a41ecc9 bash-language-server: sandbox with bunpen 2024-09-03 02:44:10 +00:00
ab15d2a991 programs: replace gnome-disk-utility with gparted
the latter *appears* to work better when sandboxed
2024-09-02 12:02:32 +00:00
48fccebd1e iptables: temporarily disable sandbox
it was overrestrictive
2024-09-01 21:24:19 +00:00
38c6ecefa6 programs: ship camera debugging tools 2024-09-01 11:31:10 +00:00
b4f921ab04 programs: tangram: disable (i dont use it) 2024-08-31 07:13:39 +00:00
1d79f3eacc papers: ship in place of Zathura as the default pdf viewer 2024-08-30 12:53:05 +00:00
93159485fa neovim: integrate LSP for lua, LaTeX, html, markdown, nix, OpenSCAD, Rust, js/TypeScript :) 2024-08-26 16:49:00 +00:00
e1f5a55bca neovim: enable bash and python language servers 2024-08-26 14:06:49 +00:00
afd0ec09a1 nixfmt-rfc-style: ship 2024-08-26 14:06:49 +00:00
ae8e9267c4 nixpkgs: 0-unstable-2024-08-21 -> 0-unstable-2024-08-25 2024-08-26 08:15:49 +00:00
5f35eaccd9 programs/host: sandbox with bunpen instead of landlock
this just acts as a good proof-of-concept / testing it in the wild
2024-08-23 16:00:31 +00:00
9b11b64349 haredoc: ship 2024-08-22 09:00:14 +00:00
f834f551ed assorted: clarify why i use wrapperType = inplace when sandboxing 2024-08-15 21:01:42 +00:00
140b61a944 slic3r: ship 2024-08-15 10:32:22 +00:00
db7767c679 assorted: remove some no-longer-needed sandbox.wrapperType = "inplace" declarations 2024-08-15 10:32:22 +00:00
74acfeadd5 programs/assorted: clarify sandbox.enable = false situation 2024-08-12 10:27:41 +00:00
e7d5a61014 libcap: split into separate capsh and captree programs, and sandbox the latter 2024-08-12 10:13:50 +00:00
fc826a3503 libcap: patch in captree locally rather than via a nixpkgs patch that would force mass rebuilds 2024-08-12 09:39:43 +00:00
f0b0d15ad7 evtest: ship 2024-08-11 06:26:58 +00:00
cbe71868ef newsflash: deploy 2024-08-09 10:25:53 +00:00
c695f7a979 foliate: ship 2024-08-08 21:08:51 +00:00