sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

darwin02: add sandbox workaround

Browse source
This commit is contained in:
zowoq 2023-11-20 09:30:26 +10:00
parent e55dafbe9d
commit 5e69b42854
1 changed files with 5 additions and 0 deletions

5
hosts/darwin02/configuration.nix
View file

@ -8,6 +8,11 @@
inputs.self.darwinModules.remote-builder
];
# can be removed when we switch back to the nixpkgs hercules-ci-agent
system.systemBuilderArgs.sandboxProfile = ''
(allow file-read* file-write* process-exec mach-lookup (subpath "${builtins.storeDir}"))
'';
nix.settings.sandbox = "relaxed";
nix.settings.extra-platforms = [ "x86_64-darwin" ];