-
-
Notifications
You must be signed in to change notification settings - Fork 13.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build-fhs-userenv-bubblewrap: Preserve symlinks in /etc #183874
build-fhs-userenv-bubblewrap: Preserve symlinks in /etc #183874
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks like a solid fix for #126234 and similar issues.
LGTM
1987762
to
98773c9
Compare
This patch has been sitting for a while. Do we know what's blocking this patch from merged? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe so. It'd also solve many other trick issues caused by missing symlink in sandbox (eg, wrong timezone in steam client) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like this, some non-blocking nits though.
98773c9
to
f86664b
Compare
If the original file in /etc is a symlink, make it a symlink inside the sandbox as well. This fixes NixOS#126234 (comment) Co-authored-by: Linus Heckemann <git@sphalerite.org>
f86664b
to
42ef5de
Compare
Back link a related fix in #286360 |
Description of changes
If the original file in
/etc
is a symlink, make it a symlink inside the sandbox as well. This PR is a more complete solution to #126234 (comment), replacing #145258.If you bind-mount an individual file and the file is deleted then recreated, the mountpoint will still refer to the original file and cannot be further bind-mounted:
Since both
/etc/static
and/run
are bind-mounted already, we should just keep the symlinks inside the sandbox.Tested in the same manner as in #126234 (comment). I can launch games after disconnecting and reconnecting to Wi-Fi with
steam -steamdeck
.Things done
sandbox = true
set innix.conf
? (See Nix manual)nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD"
. Note: all changes have to be committed, also see nixpkgs-review usage./result/bin/
)nixos/doc/manual/md-to-db.sh
to update generated release notes