tjh.dev
1diff --git a/windmill-worker/nsjail/run.bash.config.proto b/backend/windmill-worker/nsjail/run.bash.config.proto
2index e93e6b45..bbedb165 100644
3--- a/windmill-worker/nsjail/run.bash.config.proto
4+++ b/windmill-worker/nsjail/run.bash.config.proto
5@@ -18,6 +18,12 @@ clone_newuser: {CLONE_NEWUSER}
6 keep_caps: false
7 keep_env: true
8
9+mount {
10+ src: "/nix/store"
11+ dst: "/nix/store"
12+ is_bind: true
13+}
14+
15 mount {
16 src: "/bin"
17 dst: "/bin"
18@@ -25,6 +31,7 @@ mount {
19 }
20
21 mount {
22+ mandatory: false
23 src: "/lib"
24 dst: "/lib"
25 is_bind: true
26@@ -32,6 +39,7 @@ mount {
27
28
29 mount {
30+ mandatory: false
31 src: "/lib64"
32 dst: "/lib64"
33 is_bind: true
34@@ -39,6 +47,7 @@ mount {
35
36
37 mount {
38+ mandatory: false
39 src: "/usr"
40 dst: "/usr"
41 is_bind: true