diff options
| author | Jared Baur <jaredbaur@fastmail.com> | 2025-11-21 15:43:24 -0800 |
|---|---|---|
| committer | Jared Baur <jaredbaur@fastmail.com> | 2025-11-21 15:43:24 -0800 |
| commit | 1ccfe2eb2692b700f1dacd0256bd719cfa2bb22a (patch) | |
| tree | 1f71d2c3495160e6519c6c839ff9d898f580e526 /pkgs/development/python-modules/python-openstackclient | |
| parent | fe6c67bf311f5ffc830e1940481c23114e305122 (diff) | |
buildFHSEnvBubblewrap: do not use read-only bind on /nix
Using a read-only bind mount on /nix for bubblewrap FHS environments
means that the build products of buildFHSEnvBubblewrap cannot write to
anywhere in /nix (notably /nix/var/nix/*, which is not a read-only
directory in any deployment I've seen). Since /nix/store is in most
cases already read-only on the host system (thanks to
`boot.nixStoreMountOpts` defaulting to options that make it read-only),
there is no need to enforce that property on the bubblewrap side as
well.
Diffstat (limited to 'pkgs/development/python-modules/python-openstackclient')
0 files changed, 0 insertions, 0 deletions