nix: if isStatic && atLeast210 then --enable-embedded-sandbox-shell

This commit enables the embedded sandbox shell for static builds of nix>=2.10.
This commit is contained in:
Adam Joseph 2022-08-06 14:43:08 -07:00
parent cfb180c2f0
commit a0d2937643

View File

@ -169,6 +169,8 @@ self = stdenv.mkDerivation {
"--disable-init-state"
] ++ lib.optionals stdenv.isLinux [
"--with-sandbox-shell=${busybox-sandbox-shell}/bin/busybox"
] ++ lib.optionals (atLeast210 && stdenv.isLinux && stdenv.hostPlatform.isStatic) [
"--enable-embedded-sandbox-shell"
] ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform && stdenv.hostPlatform ? nix && stdenv.hostPlatform.nix ? system) [
"--with-system=${stdenv.hostPlatform.nix.system}"
] ++ lib.optionals (!withLibseccomp) [