9416ef1ff6
firefox-extensions: update
2024-03-04 08:18:48 +00:00
b1dff9bfa8
steam: fix controllers to work in the sandbox
2024-03-03 20:03:20 +00:00
0003acc091
nixpkgs: 2024-03-02 -> 2024-03-03
...
```
• Updated input 'nixpkgs-next-unpatched':
'github:nixos/nixpkgs/aefac840b87e8e0ab658fa5080539e292ad8a9ba' (2024-03-02)
→ 'github:nixos/nixpkgs/6a2985393fcc1dfabc6d36af148ca761a807e002' (2024-03-03)
• Updated input 'nixpkgs-unpatched':
'github:nixos/nixpkgs/df41961bd4b7e838cb997543ea1297f4cbd7da15' (2024-03-02)
→ 'github:nixos/nixpkgs/286977c08ddf540b4c6bebd8cd96fe30070bcb46' (2024-03-03)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/a1c8de14f60924fafe13aea66b46157f0150f4cf' (2024-02-26)
→ 'github:Mic92/sops-nix/075df9d85ee70cfb53e598058045e1738f05e273' (2024-03-03)
• Updated input 'sops-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/89a2a12e6c8c6a56c72eb3589982c8e2f89c70ea' (2024-02-25)
→ 'github:NixOS/nixpkgs/66d65cb00b82ffa04ee03347595aa20e41fe3555' (2024-03-03)
```
2024-03-03 10:11:16 +00:00
0630037f86
steam: sandbox
...
controllers are untested, probably need to be added; graphics and sound work fine
2024-03-03 10:10:14 +00:00
9513680538
sway: enable net access in the sandbox (for Xwayland)
2024-03-03 10:09:29 +00:00
0affeb098a
rofi: optimize sizing
2024-03-03 07:36:33 +00:00
979d07d693
wob: port pulseaudio -> pipewire
2024-03-03 07:22:03 +00:00
fd072883dc
sane-input-handler: port pulseaudio -> pipewire native
2024-03-03 07:13:23 +00:00
ed87792f9b
sed: sandbox
2024-03-03 07:06:00 +00:00
8821b3ca7d
procps: sandbox
2024-03-03 06:55:17 +00:00
5e5a1fbaae
rofi: allow to use more space on moby when keyboard is active
2024-03-03 04:46:12 +00:00
d2f470dc74
wvkbd: sandbox
2024-03-03 04:44:23 +00:00
7933ef41a2
unl0kr: simplify this code
2024-03-03 04:43:44 +00:00
6b45589e54
wireplumber: ensure ALSA_UCM_CONF2 env var is on PATH
...
this is critical for pipewire/wireplumber to work on moby
2024-03-03 04:43:11 +00:00
b04357c9de
nix.conf: dont ship NIX_PATH for light deploys
...
it's like 150 MiB
2024-03-03 03:53:13 +00:00
4b04cbc078
mpv: couple app volume to system volume
2024-03-03 03:22:28 +00:00
1498e364b2
doc: mimeo: mention jaro as alternative
2024-03-03 03:16:10 +00:00
0aaa3eaaeb
mpv: remove legacy vo=wlshim hack
2024-03-02 23:46:52 +00:00
3ac6b92c18
/etc/nix/registry.json: don't generate for -light builds (it links back to src)
2024-03-02 23:42:58 +00:00
c747855810
bonsai: sandbox
2024-03-02 22:34:38 +00:00
711865018d
/etc/nixos: don't link on '*-light' builds
2024-03-02 22:13:04 +00:00
f33fcc2018
nixpatches: update hashes
2024-03-02 21:23:44 +00:00
96ec0106ee
sane-input-handler: leverage sane-open-desktop instead of making direct gdbus calls
2024-03-02 21:20:47 +00:00
0c4d7761d3
sane-input-handler: sandbox
2024-03-02 21:20:47 +00:00
fe10640821
wob-pulse: sandbox
2024-03-02 20:57:44 +00:00
1f208083be
mpvScripts.uosc: 5.1.1 -> 5.2.0
2024-03-02 20:39:04 +00:00
6ec3126321
moby: fix display driver reload check to run before unl0kr
...
this should fix the no-graphics-on-boot bug i'm seeing. it was previously fixed for lightdm and greetd: just not unl0kr
2024-03-02 19:50:50 +00:00
8029744c90
modules/programs: don't expose *all* of /run/secrets/home to every program
...
this was actually causing a lot of bwrap errors because that directory's not user-readable
turns out any program which already uses programs.xyz.secrets gets the /run/secrets mounts for free via symlink following
2024-03-02 18:51:39 +00:00
1fcf0bfcb1
swaync: fix signal-desktop check to be --user
2024-03-02 18:33:35 +00:00
a3ae650273
dialect: fix so it works inside a sandbox
2024-03-02 18:25:13 +00:00
7e0bef549f
nixpkgs: 2024-03-01 -> 2024-03-02
...
```
• Updated input 'nixpkgs-next-unpatched':
'github:nixos/nixpkgs/ee743c92310804de4b4505ff0ac40b4f3f4f49de' (2024-03-01)
→ 'github:nixos/nixpkgs/aefac840b87e8e0ab658fa5080539e292ad8a9ba' (2024-03-02)
• Updated input 'nixpkgs-unpatched':
'github:nixos/nixpkgs/f7fca9d98b0ec282f4b0d63f1fc2e38caf4ea55a' (2024-03-01)
→ 'github:nixos/nixpkgs/df41961bd4b7e838cb997543ea1297f4cbd7da15' (2024-03-02)
```
2024-03-02 07:52:21 +00:00
3b603519ff
fuzzel: sandbox (well, i probably dont even have it on my system anymore :P)
2024-03-02 07:43:42 +00:00
f69ca166f4
sway: sandbox
2024-03-02 07:41:51 +00:00
a45e42910d
make-sandboxed: generalize runCommand patch to handle any derivation, called with or without callPackage
2024-03-02 07:11:45 +00:00
3dd1d18dcd
less: sandbox
2024-03-02 07:11:45 +00:00
28cb705bd4
grim: sandbox
2024-03-02 07:11:45 +00:00
7fa1dbc5d5
slurp: sandbox
2024-03-02 07:11:45 +00:00
8b7575c205
swappy: sandbox
2024-03-02 07:11:45 +00:00
52e9902fa1
sane-screenshot: give it permissions to my screenshots dir (derp)
2024-03-02 06:14:05 +00:00
ab765a81af
sway: integrate sane-screenshot as the PrintScreen shortcut
2024-03-02 06:14:05 +00:00
a7bd831ad8
sane-screenshot: port to sane.programs
2024-03-02 06:14:05 +00:00
063d99dd73
todo.md: task to remove /run/wrappers
2024-03-02 05:42:26 +00:00
0d48c462cb
sane-screenshot: init
2024-03-02 02:04:48 +00:00
f4ec09f010
rofi: remember the last selected directory
2024-03-02 00:35:29 +00:00
a7ef9fc0b8
todo.md: task for better app integrations
2024-03-02 00:21:56 +00:00
a40cefc8a5
pipewire: speculatively add /dev/video*
2024-03-02 00:14:47 +00:00
f55bb3518f
wireplumber: add missing /dev/video2 which is on moby
2024-03-02 00:14:21 +00:00
3d16aa62ea
sway: let the pinephone default to it's normal scaling
...
it's actually pretty nice at 2.0 scaling with my current apps. i'll need to tweak swaync, conky, wvkbd, etc. later.
2024-03-01 23:53:31 +00:00
2548cfeadc
xdg-desktop-portal-wlr: fix crashing due to over-restrictive sandbox
2024-03-01 21:17:31 +00:00
90acbf716d
Videos/gPodder: allow access from mpv and rofi
2024-03-01 21:02:04 +00:00
