sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

modules/darwin/hercules-ci: add sandbox workaround

Browse source
This commit is contained in:
zowoq 2024-06-10 13:10:25 +10:00
parent 9cb0daaa63
commit 1f6af7ef75
1 changed files with 4 additions and 0 deletions

4
modules/darwin/hercules-ci/default.nix
View file

@ -20,4 +20,8 @@
binaryCachesPath = config.age.secrets.binary-caches.path; binaryCachesPath = config.age.secrets.binary-caches.path;
clusterJoinTokenPath = config.age.secrets.cluster-join-token.path; clusterJoinTokenPath = config.age.secrets.cluster-join-token.path;
}; };
system.systemBuilderArgs.sandboxProfile = ''
(allow file-read* file-write* process-exec mach-lookup (subpath "${builtins.storeDir}"))
'';
} }