wanderer/infra
1
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

nix(t14): add some firejail programs

Browse Source
This commit is contained in:
surtur 2023-12-11 12:47:36 +01:00
parent 5e74b57b7b
commit 7217bbd0cb
Signed by: wanderer
SSH Key Fingerprint: SHA256:MdCZyJ2sHLltrLBp0xQO0O1qTW9BT/xl5nXkDvhlMCI
2 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nix/hosts/t14/configuration.nix
View File

@ -13,6 +13,7 @@
../../modules/base.nix
../../modules/dnscrypt.nix
../../modules/firejail.nix
../../modules/zram.nix
];

24
nix/modules/firejail.nix Normal file
View File

@ -0,0 +1,24 @@
{
config,
pkgs,
...
}: {
programs.firejail.enable = true;
# required to run chromium
security.chromiumSuidSandbox.enable = true;
# create system-wide executables firefox and chromium
# that will wrap the real binaries so everything
# work out of the box.
programs.firejail.wrappedBinaries = {
jailfirefox = {
executable = "${pkgs.lib.getBin pkgs.firefox}/bin/firefox";
profile = "${pkgs.firejail}/etc/firejail/firefox.profile";
};
jailchromium = {
executable = "${pkgs.lib.getBin pkgs.chromium}/bin/chromium";
profile = "${pkgs.firejail}/etc/firejail/chromium.profile";
};
};
}