a2d92bb20e
And add a 116 KiB ash shell from busybox to the release build. This helps to make sandbox builds work out of the box on non-NixOS systems and with diverted stores.
21 lines
398 B
Nix
21 lines
398 B
Nix
{ pkgs }:
|
|
|
|
rec {
|
|
sh = pkgs.busybox.override {
|
|
useMusl = true;
|
|
enableStatic = true;
|
|
enableMinimal = true;
|
|
extraConfig = ''
|
|
CONFIG_ASH y
|
|
CONFIG_ASH_BUILTIN_ECHO y
|
|
CONFIG_ASH_BUILTIN_TEST y
|
|
CONFIG_ASH_OPTIMIZE_FOR_SIZE y
|
|
'';
|
|
};
|
|
|
|
configureFlags =
|
|
[ "--disable-init-state"
|
|
"--enable-gc"
|
|
"--with-sandbox-shell=${sh}/bin/busybox"
|
|
];
|
|
}
|