Files
nixpkgs/pkgs/by-name/wi/windmill/run.rust.config.proto.patch

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

38 lines
690 B
Diff
Raw Permalink Normal View History

2025-10-09 14:15:47 +02:00
diff --git a/windmill-worker/nsjail/run.rust.config.proto b/windmill-worker/nsjail/run.rust.config.proto
index 3357cd88a..c0a1e9534 100644
--- a/windmill-worker/nsjail/run.rust.config.proto
+++ b/windmill-worker/nsjail/run.rust.config.proto
@@ -14,16 +14,24 @@ clone_newuser: {CLONE_NEWUSER}
keep_caps: false
keep_env: true
+mount {
+ src: "/nix/store"
+ dst: "/nix/store"
+ is_bind: true
+}
+
mount {
src: "/bin"
dst: "/bin"
is_bind: true
+ mandatory: false
}
mount {
src: "/lib"
dst: "/lib"
is_bind: true
+ mandatory: false
}
@@ -39,6 +47,7 @@ mount {
src: "/usr"
dst: "/usr"
is_bind: true
+ mandatory: false
}
mount {