noa/nixconf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use sandbox

Browse source
This commit is contained in:
Noa Aarts 2024-10-23 15:56:19 +02:00
parent c4b68e358f
commit 3b2e272cb3
Signed by: noa
GPG key ID: 1850932741EFF672
1 changed files with 7 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

16
hosts/lambdaos/configuration.nix
View file

@ -43,16 +43,14 @@
}; };
}; };
nix.sshServe = { nix.settings = {
enable = true; trusted-users = [ "noa" ];
keys = sandbox = true;
[ show-trace = true;
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRZXNqs7FgVeTCt2ElOARt5f/bR1gjk5bS+zCJA6C1P root@nuOS"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII7X17VovmxkwhKxIg795yO1Sf7dwO50pybMRlUDLLcA hydra@nuOS"
];
write = true;
};
system-features = [ "big-parallel" "kvm" "recursive-nix" ];
sandbox-paths = [ "/bin/sh=${pkgs.busybox-sandbox-shell.out}/bin/busybox" ];
};
# Allow unfree packages # Allow unfree packages
nixpkgs.config = { nixpkgs.config = {