commit 64d963ad61e5b6f1afc7d7393638d449822e72ac · veryroundbird.house/core

veryroundbird.house / core

this repo has no description

nix/vm: isolate it a bit more

I personally don't like that nixos-shell inherits a ton of stuff from the
host by default, even mounting my home directory as r/w! I imagine I'm not
the only one with this opinion, so let's put a stop to it by default.

Signed-off-by: Winter <winter@winter.cafe>

winter.bsky.social 4 months ago 64d963ad 9e7cdea4

options

unified split

Changed files

nix

vm.nix

nix/vm.nix

···

       20
        
               pkgs,

     

       21
        
               ...

     

       22
        
             }: {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       23
        
               virtualisation = {

     

       24
        
                 memorySize = 2048;

     

       25
        
                 diskSize = 10 * 1024;

···

       20
        
               pkgs,

     

       21
        
               ...

     

       22
        
             }: {

     

       23
       +
               nixos-shell = {

     

       24
       +
                 inheritPath = false;

     

       25
       +
                 mounts = {

     

       26
       +
                   mountHome = false;

     

       27
       +
                   mountNixProfile = false;

     

       28
       +
                 };

     

       29
       +
               };

     

       30
        
               virtualisation = {

     

       31
        
                 memorySize = 2048;

     

       32
        
                 diskSize = 10 * 1024;