nixos-config/pkgs/bwrap-helper
Simon Bruder 18652c7580
bwrap-helper: Always bind /etc/ssl/certs
The bwrap fhs userenv uses readlink -f to resolve symlinks. It is called
in the argument list of bwrap like this:

  --ro-bind-try $(readlink -f /etc/ssl/certs) /etc/ssl/certs

Normally, readlink -f returns the passed path if there is no file at the
path. However, this only works, if the parent directory of the file
exists. Thus if /etc/ssl does not exist, readlink -f /etc/ssl/certs will
return nothing. This causes the argument list of bwrap to be wrong (it
has only one argument to --ro-bind-try when it expected two), which
causes it to fail with hard to track down errors.
2022-03-12 16:42:06 +01:00
..
bwrap-helper.py bwrap-helper: Always bind /etc/ssl/certs 2022-03-12 16:42:06 +01:00
default.nix bwrap-helper: Do not filter dbus socket 2021-01-09 12:53:34 +01:00