Commit Graph

8098 Commits

Author SHA1 Message Date
b483254bb3 wireshark: sandbox with bunpen 2024-09-11 01:27:26 +00:00
884435fe21 refactor: remove uses of deprecated "rust.toRustTarget" 2024-09-11 01:25:15 +00:00
33aaf8c458 nixpkgs: 24.05-unstable-2024-09-08 -> 24.05-unstable-2024-09-10 2024-09-10 23:24:05 +00:00
1c3c7f599f feeds/update.py: fix sources which have null description 2024-09-10 20:30:29 +00:00
e7f54cda6b feeds: subscribe to Marijn Braam's blog 2024-09-10 19:54:46 +00:00
909beec420 sane-reclaim-disk-space: fix sandboxing 2024-09-10 19:35:42 +00:00
ae5bad1514 feeds: subscribe to mii beta / Baby Wogue 2024-09-10 18:16:45 +00:00
77683e090c lsof: sandbox with bunpen 2024-09-10 08:52:32 +00:00
f7c5b16c1c gst-launch: ship gst-libav, for H.264 decoding 2024-09-10 08:52:22 +00:00
ad98e96823 gst-launch: ship default plugins 2024-09-10 08:06:04 +00:00
e167cbbbb4 gst-launch: ship 2024-09-10 07:40:48 +00:00
eb6c0acf11 v4l-utils: expand docs 2024-09-10 07:36:03 +00:00
f7a650b0e0 nethogs: sandbox with bunpen 2024-09-10 06:59:18 +00:00
a37554ada3 moby: ship all of megi's patches again: this fixes charging. once i get the camera working i can then start wittling down the patch stack 2024-09-10 06:57:01 +00:00
d3fa4e6e7c programs: ship v4l-utils, for debugging the Pinephone camera pipeline 2024-09-10 05:00:15 +00:00
90df023be0 firefox: add search keyword for ebay 2024-09-10 03:56:54 +00:00
f8141c5270 zfs-tools: sandbox with bunpen 2024-09-10 02:18:44 +00:00
1599df26e7 /mnt/persist/private: remove unneeded "sandbox.keepPids" 2024-09-10 01:09:21 +00:00
0b39f18faa /mnt/persist/ephemeral: dont even try to delete the backing directory -- just everything contained in it 2024-09-10 00:45:07 +00:00
8ae7e255e5 gocryptfs: sandbox with bunpen 2024-09-10 00:02:03 +00:00
6f72453f5d nvme-cli: sandbox with bunpen 2024-09-09 19:51:36 +00:00
ca09c93bf8 bunpen: handle unexpected whitepsace in BUNPEN_APPEND env var 2024-09-09 07:29:30 +00:00
ba229aaf69 bunpen: implement BUNPEN_APPEND env var 2024-09-09 04:16:38 +00:00
95994de1ad provision-private-key (/run/gocryptfs/private.key): sandbox with bunpen 2024-09-09 03:56:55 +00:00
f04d0c07af programs: split yt-dlp config out of mpv config 2024-09-08 22:16:32 +00:00
6dc4aeafc1 programs/yt-dlp: migrate to own file 2024-09-08 21:51:23 +00:00
1067bc9215 scripts/deploy: separate eval and build phases to decrease maximum ram requirements 2024-09-08 20:36:54 +00:00
bb18f65ed2 nixpkgs: 2024-09-06 -> 2024-09-08 2024-09-08 20:35:58 +00:00
0d6a823382 syshud: 0-unstable-2024-09-04 -> 0-unstable-2024-09-07 2024-09-08 20:35:26 +00:00
13aad0256d nixpkgs-wayland: 0-unstable-2024-09-06 -> 0-unstable-2024-09-08 2024-09-08 20:35:07 +00:00
ca4061ab94 sops-nix: assets-unstable-2024-09-05 -> assets-unstable-2024-09-08 2024-09-08 20:34:45 +00:00
df65454950 uassets: 0-unstable-2024-09-06 -> 0-unstable-2024-09-08 2024-09-08 20:34:28 +00:00
64311094ad zsh: add more eza aliases (la, lla, lal) 2024-09-07 22:52:13 +00:00
ac53d5512b cryptsetup: sandbox with bunpen 2024-09-07 22:40:29 +00:00
9d594f696a bunpen: support BUNPEN_DEBUG=n env var 2024-09-07 22:32:32 +00:00
4ade6b1418 cryptsetup: sandbox with bwrap 2024-09-07 22:24:13 +00:00
3ef98a5ab3 modules/programs: support "sandbox.keepIpc = true" 2024-09-07 22:10:11 +00:00
130ce0e69f bunpen: support --bunpen-keep-ipc 2024-09-07 22:08:25 +00:00
3fb566a3fd ethtool: sandbox with bwrap
it doesn't *quite* sandbox with bunpen: i lose Wake-on-lan info... not sure why
2024-09-07 21:19:24 +00:00
135af51f37 eza: sandbox with bunpen 2024-09-07 21:12:18 +00:00
98ed5f10ee e2fsprogs: sandbox with bunpen 2024-09-07 21:08:21 +00:00
71241f83e2 nettools: sandbox with bunpen 2024-09-07 21:02:31 +00:00
2b7143fb84 portfolio-filemanager: sandbox with bunpen
note that portfolio seems not to use portal integration anymore? so using it to launch e.g. Music files totally fails (because i don't grant pipewire access)

well, i don't really use this that much, so i'll deal with that only if/when it's an issue
2024-09-07 20:58:57 +00:00
0605034a53 eg25-control: sandbox with bunpen 2024-09-07 20:57:11 +00:00
140f2b515e parted: sandbox with bunpen (only minimally tested) 2024-09-07 20:43:03 +00:00
ca5eab656d tcpdump: sandbox with bunpen 2024-09-07 20:42:11 +00:00
028f56f70b hping: sandbox with bunpen 2024-09-07 20:41:37 +00:00
9f4c40fe01 gptfdisk: sandbox with bunpen (minimally tested) 2024-09-07 20:36:50 +00:00
8eadede76d wireguard-tools: sandbox with bunpen 2024-09-07 20:33:54 +00:00
823ec0e6f4 pcituils: sandbox with bunpen 2024-09-07 20:28:39 +00:00