This commit is contained in:
2026-02-18 21:05:55 -07:00
parent 6deeb3d2a7
commit f7990beee6

View File

@@ -27,7 +27,6 @@
kubectl kubectl
kubernetes-helm kubernetes-helm
curl curl
sudo
]; ];
settings = { settings = {
container = { container = {
@@ -115,6 +114,7 @@
RestrictAddressFamilies = lib.mkForce [ ]; RestrictAddressFamilies = lib.mkForce [ ];
ReadWritePaths = lib.mkForce [ ]; ReadWritePaths = lib.mkForce [ ];
BindReadOnlyPaths = lib.mkForce [ ]; BindReadOnlyPaths = lib.mkForce [ ];
BindPaths = lib.mkForce [ "/run/wrappers" ];
DeviceAllow = lib.mkForce [ "/dev/zfs rw" ]; DeviceAllow = lib.mkForce [ "/dev/zfs rw" ];
DevicePolicy = lib.mkForce "auto"; DevicePolicy = lib.mkForce "auto";