fuuko/drone-runner-exec: Use unstable nix

This also adds /etc/static as read-only path to the sandbox, since
otherwise /etc/nix/nix.conf can’t be read.
This commit is contained in:
Simon Bruder 2021-05-01 18:31:05 +02:00
parent 400b55a293
commit 84c72583fe
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC

View file

@ -10,7 +10,7 @@ let
git-lfs git-lfs
gnutar gnutar
gzip gzip
nix nixUnstable
]; ];
in in
{ {
@ -44,6 +44,7 @@ in
"/etc/passwd:/etc/passwd" "/etc/passwd:/etc/passwd"
"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts" "/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts"
"/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt" "/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt"
"/etc/static"
"/nix" "/nix"
]; ];
ExecStart = "${pkgs.unstable.drone-runner-exec}/bin/drone-runner-exec"; ExecStart = "${pkgs.unstable.drone-runner-exec}/bin/drone-runner-exec";