tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1diff --git a/windmill-worker/nsjail/run.go.config.proto b/windmill-worker/nsjail/run.go.config.proto
2index 3af548d1..39ff4da7 100644
3--- a/windmill-worker/nsjail/run.go.config.proto
4+++ b/windmill-worker/nsjail/run.go.config.proto
5@@ -25,6 +25,13 @@ mount {
6 }
7
8 mount {
9+ src: "/nix/store"
10+ dst: "/nix/store"
11+ is_bind: true
12+}
13+
14+mount {
15+ mandatory: false
16 src: "/lib"
17 dst: "/lib"
18 is_bind: true
19@@ -32,6 +39,7 @@ mount {
20
21
22 mount {
23+ mandatory: false
24 src: "/lib64"
25 dst: "/lib64"
26 is_bind: true
27@@ -39,6 +47,7 @@ mount {
28
29
30 mount {
31+ mandatory: false
32 src: "/usr"
33 dst: "/usr"
34 is_bind: true