tjh.dev
1diff --git a/windmill-worker/nsjail/run.bash.config.proto b/windmill-worker/nsjail/run.bash.config.proto
2index 63018f765..d8bb0c0a7 100644
3--- a/windmill-worker/nsjail/run.bash.config.proto
4+++ b/windmill-worker/nsjail/run.bash.config.proto
5@@ -15,10 +15,17 @@ keep_caps: false
6 keep_env: true
7 mount_proc: true
8
9+mount {
10+ src: "/nix/store"
11+ dst: "/nix/store"
12+ is_bind: true
13+}
14+
15 mount {
16 src: "/bin"
17 dst: "/bin"
18 is_bind: true
19+ mandatory: false
20 }
21
22 mount {
23@@ -32,6 +39,7 @@ mount {
24 src: "/bin"
25 dst: "/bin"
26 is_bind: true
27+ mandatory: false
28 }
29
30 mount {
31@@ -45,6 +53,7 @@ mount {
32 src: "/lib"
33 dst: "/lib"
34 is_bind: true
35+ mandatory: false
36 }
37
38
39@@ -60,6 +69,7 @@ mount {
40 src: "/usr"
41 dst: "/usr"
42 is_bind: true
43+ mandatory: false
44 }
45
46 mount {