environment
This commit is contained in:
@@ -65,7 +65,9 @@
|
|||||||
"/data/runner"
|
"/data/runner"
|
||||||
"/home/github/infrastructure"
|
"/home/github/infrastructure"
|
||||||
];
|
];
|
||||||
|
BindReadOnlyPaths = [
|
||||||
|
"/nix/store"
|
||||||
|
];
|
||||||
# Disable all sandboxing features
|
# Disable all sandboxing features
|
||||||
DynamicUser = lib.mkForce false;
|
DynamicUser = lib.mkForce false;
|
||||||
PrivateDevices = lib.mkForce false;
|
PrivateDevices = lib.mkForce false;
|
||||||
|
|||||||
Reference in New Issue
Block a user