646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
38 lines
690 B
Diff
38 lines
690 B
Diff
diff --git a/windmill-worker/nsjail/run.rust.config.proto b/windmill-worker/nsjail/run.rust.config.proto
|
|
index 3357cd88a..c0a1e9534 100644
|
|
--- a/windmill-worker/nsjail/run.rust.config.proto
|
|
+++ b/windmill-worker/nsjail/run.rust.config.proto
|
|
@@ -14,16 +14,24 @@ clone_newuser: {CLONE_NEWUSER}
|
|
keep_caps: false
|
|
keep_env: true
|
|
|
|
+mount {
|
|
+ src: "/nix/store"
|
|
+ dst: "/nix/store"
|
|
+ is_bind: true
|
|
+}
|
|
+
|
|
mount {
|
|
src: "/bin"
|
|
dst: "/bin"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
mount {
|
|
src: "/lib"
|
|
dst: "/lib"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
|
|
@@ -39,6 +47,7 @@ mount {
|
|
src: "/usr"
|
|
dst: "/usr"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
mount {
|