Allow system certs access to fixed-output derivations

This commit is contained in:
Guillaume Maudoux 2022-11-16 15:23:59 +01:00
parent 62960f3291
commit a7d2a3d087

View file

@ -1715,6 +1715,8 @@ void LocalDerivationGoal::runChild()
for (auto & path : { "/etc/resolv.conf", "/etc/services", "/etc/hosts" })
if (pathExists(path))
ss.push_back(path);
dirsInChroot.emplace(settings.caFile, "/etc/ssl/certs/ca-certificates.crt");
}
for (auto & i : ss) dirsInChroot.emplace(i, i);