environment

2026-02-07 14:02:00 -07:00
parent 5f55fe11a3
commit 5484553a87
1 changed files with 3 additions and 1 deletions
--- a/nix/modules/gitea-runner.nix
+++ b/nix/modules/gitea-runner.nix
@@ -65,7 +65,9 @@
      "/data/runner"
      "/home/github/infrastructure"
    ];
-    
+    BindReadOnlyPaths = [
+      "/nix/store"
+    ];
    # Disable all sandboxing features
    DynamicUser = lib.mkForce false;
    PrivateDevices = lib.mkForce false;