foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 04:58:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

wrapper-manager/sandboxing: add wraparound under namespace

Browse Source 
Each wrapper represents one... wrapper anyways so it is fine to have
this. If nothing else applies, you could still make the specific
sandboxing module to have its own wraparound option namespace. That
practice should be discouraged though.
This commit is contained in:
Gabriel Arazas 2024-07-29 16:39:59 +08:00
parent 87f36c728d
commit 7ba31a2e75
No known key found for this signature in database
GPG Key ID: 62104B43D00AA360
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/wrapper-manager/sandboxing/bubblewrap/default.nix
View File

@ -87,7 +87,10 @@ in
config.env;
arg0 = lib.getExe' submoduleCfg.package "bwrap";
prependArgs = lib.mkBefore (submoduleCfg.extraArgs ++ [ "--" submoduleCfg.wraparound.executable ] ++ submoduleCfg.wraparound.extraArgs);
prependArgs = lib.mkBefore
(submoduleCfg.extraArgs
++ [ "--" config.sandboxing.wraparound.executable ]
++ config.sandboxing.wraparound.extraArgs);
}
(lib.mkIf submoduleCfg.enableNetwork {

7
modules/wrapper-manager/sandboxing/default.nix
View File

@ -7,7 +7,7 @@
options.wrappers =
let
sandboxingType = { name, lib, config, ... }: {
sandboxingType = { name, lib, config, options, ... }: {
options.sandboxing = {
variant = lib.mkOption {
type = with lib.types; nullOr (enum []);
@ -18,6 +18,11 @@
default = null;
example = "bubblewrap";
};
wraparound = {
executable = options.arg0;
extraArgs = options.extraArgs;
};
};
};
in