Klub-RZ/nur
4
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

modules(drone-exec-runner): leak nixpkgs read-only for bootstrapping

Browse source
This commit is contained in:
Raito Bezarius 2021-07-26 03:33:27 +02:00
parent 2d9da6ab1f
commit 3f6a760254
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/servers/drone-exec-runner.nix
View file

@ -75,6 +75,7 @@ in
"NIX_REMOTE=daemon" "NIX_REMOTE=daemon"
"PAGER=cat" "PAGER=cat"
"DRONE_RUNNER_NAME=${runnerName}" "DRONE_RUNNER_NAME=${runnerName}"
"NIX_PATH=nixpkgs=/var/nixpkgs"
] ++ cfg.env; ] ++ cfg.env;
BindPaths = [ BindPaths = [
@ -86,6 +87,7 @@ in
"/etc/passwd:/etc/passwd" "/etc/passwd:/etc/passwd"
"/etc/group:/etc/group" "/etc/group:/etc/group"
"/nix/var/nix/profiles/system/etc/nix:/etc/nix" "/nix/var/nix/profiles/system/etc/nix:/etc/nix"
"/nix/var/nix/profiles/per-user/root/channels/nixos:/var/nixpkgs"
"${config.environment.etc."ssl/certs/ca-certificates.crt".source}:/etc/ssl/certs/ca-certificates.crt" "${config.environment.etc."ssl/certs/ca-certificates.crt".source}:/etc/ssl/certs/ca-certificates.crt"
"${config.environment.etc."ssh/ssh_known_hosts".source}:/etc/ssh/ssh_known_hosts" "${config.environment.etc."ssh/ssh_known_hosts".source}:/etc/ssh/ssh_known_hosts"
"/etc/machine-id" "/etc/machine-id"