···

       
94
       
94
       
 
       
      };

     

       
95
       
95
       
 
       


     

       
96
       
96
       
 
       
      config = let

     

       
97
       
97
       
-
       
        rootName = "${mkPathSafeName name}-chroot";

     

       
98
       
97
       
 
       
        inherit (config.confinement) binSh fullUnit;

     

       
99
       
98
       
 
       
        wantsAPIVFS = lib.mkDefault (config.confinement.mode == "full-apivfs");

     

       
100
       
99
       
 
       
      in lib.mkIf config.confinement.enable {