darwin02: add sandbox workaround
This commit is contained in:
parent
e55dafbe9d
commit
5e69b42854
1 changed files with 5 additions and 0 deletions
|
@ -8,6 +8,11 @@
|
||||||
inputs.self.darwinModules.remote-builder
|
inputs.self.darwinModules.remote-builder
|
||||||
];
|
];
|
||||||
|
|
||||||
|
# can be removed when we switch back to the nixpkgs hercules-ci-agent
|
||||||
|
system.systemBuilderArgs.sandboxProfile = ''
|
||||||
|
(allow file-read* file-write* process-exec mach-lookup (subpath "${builtins.storeDir}"))
|
||||||
|
'';
|
||||||
|
|
||||||
nix.settings.sandbox = "relaxed";
|
nix.settings.sandbox = "relaxed";
|
||||||
nix.settings.extra-platforms = [ "x86_64-darwin" ];
|
nix.settings.extra-platforms = [ "x86_64-darwin" ];
|
||||||
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue