bagel-box: fix /run/wrappers not being mounted on boot

This commit is contained in:
Pierre Bourdon 2024-06-23 20:27:59 +02:00
parent 5ed984e7b3
commit 8902a360db
Signed by: delroth
GPG key ID: 6FB80DCD84DA0F1C

View file

@ -1,8 +1,17 @@
{ lib, ... }:
{ config, lib, ... }:
{
boot.isContainer = true;
boot.specialFileSystems = lib.mkForce {};
# XXX: There's currently no way to remove the "problematic" entries (trying
# to override the /proc, /sys, /dev, ... mounts from systemd-nspawn) while
# also keeping the entry for the wrappers dir.
boot.specialFileSystems = lib.mkForce {
"/run/wrappers" = {
fsType = "tmpfs";
options = [ "nodev" "mode=755" "size=${config.security.wrapperDirSize}" ];
};
};
boot.loader.initScript.enable = true;