Suffix PATH on kubenix script (#67)

Fixes #66 Setting the `PATH` to `$out/bin` is causing programs from the original `PATH` (such as `gpg`) to be inaccessible to `vals` - causing decryption of sops secrets with `gpg` to fail.
hall · Jun 11, 2024 · a04066c · a04066c
1 parent 823cc87
commit a04066c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkgs/kubenix.nix b/pkgs/kubenix.nix
@@ -37,7 +37,7 @@ symlinkJoin {
 
   postBuild = ''
     wrapProgram $out/bin/kubenix \
-      --set PATH "$out/bin" \
+      --suffix PATH : "$out/bin" \
       --run 'export KUBECONFIG=''${KUBECONFIG:-${toString kubeconfig}}' \
       --set KUBECTL_EXTERNAL_DIFF '${diff}' \
       --set MANIFEST '${result}'