fuuko/drone-runner-exec: Use unstable nix
This also adds /etc/static as read-only path to the sandbox, since otherwise /etc/nix/nix.conf can’t be read.
This commit is contained in:
parent
400b55a293
commit
84c72583fe
|
@ -10,7 +10,7 @@ let
|
||||||
git-lfs
|
git-lfs
|
||||||
gnutar
|
gnutar
|
||||||
gzip
|
gzip
|
||||||
nix
|
nixUnstable
|
||||||
];
|
];
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
|
@ -44,6 +44,7 @@ in
|
||||||
"/etc/passwd:/etc/passwd"
|
"/etc/passwd:/etc/passwd"
|
||||||
"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts"
|
"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts"
|
||||||
"/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt"
|
"/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt"
|
||||||
|
"/etc/static"
|
||||||
"/nix"
|
"/nix"
|
||||||
];
|
];
|
||||||
ExecStart = "${pkgs.unstable.drone-runner-exec}/bin/drone-runner-exec";
|
ExecStart = "${pkgs.unstable.drone-runner-exec}/bin/drone-runner-exec";
|
||||||
|
|
Loading…
Reference in a new issue