nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-22 12:04:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

nixos/podman: wrap /run/wrappers for setuid shadow binaries

Browse Source 
adding it here so it only needs to be done once
This commit is contained in:
zowoq 2023-02-10 08:21:36 +10:00
parent 8ee6a032ca
commit 04b9fcca93
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/virtualisation/podman/default.nix
View File

@ -7,6 +7,8 @@ let
podmanPackage = (pkgs.podman.override { podmanPackage = (pkgs.podman.override {
extraPackages = cfg.extraPackages extraPackages = cfg.extraPackages
# setuid shadow
++ [ "/run/wrappers" ]
++ lib.optional (builtins.elem "zfs" config.boot.supportedFilesystems) config.boot.zfs.package; ++ lib.optional (builtins.elem "zfs" config.boot.supportedFilesystems) config.boot.zfs.package;
}); });