aboutsummaryrefslogtreecommitdiffhomepage
path: root/cmd/hpkg/with.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-09-29 07:07:16 +0900
committerOphestra <cat@gensokyo.uk>2025-09-29 07:07:16 +0900
commit1ba1cb886584966b4e6e65284a04dfaf8962ed65 (patch)
tree12a96d2220e88d410173ede47f25c74b5b4f9ae5 /cmd/hpkg/with.go
parent44ba7a5f02b7575a706a22aac53c8ac608d18f23 (diff)
hst/config: remove seccomp bit fields
These serve little purpose and are not friendly for use from other languages. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'cmd/hpkg/with.go')
-rw-r--r--cmd/hpkg/with.go17
1 files changed, 8 insertions, 9 deletions
diff --git a/cmd/hpkg/with.go b/cmd/hpkg/with.go
index 578d5251..59545c62 100644
--- a/cmd/hpkg/with.go
+++ b/cmd/hpkg/with.go
@@ -6,7 +6,6 @@ import (
"strings"
"hakurei.app/container"
- "hakurei.app/container/seccomp"
"hakurei.app/hst"
)
@@ -43,11 +42,11 @@ func withNixDaemon(
Identity: app.Identity,
Container: &hst.ContainerConfig{
- Hostname: formatHostname(app.Name) + "-" + action,
- Userns: true, // nix sandbox requires userns
- HostNet: net,
- SeccompFlags: seccomp.AllowMultiarch,
- Tty: dropShell,
+ Hostname: formatHostname(app.Name) + "-" + action,
+ Userns: true, // nix sandbox requires userns
+ HostNet: net,
+ Multiarch: true,
+ Tty: dropShell,
Filesystem: []hst.FilesystemConfigJSON{
{FilesystemConfig: &hst.FSBind{Target: container.AbsFHSEtc, Source: pathSet.cacheDir.Append("etc"), Special: true}},
{FilesystemConfig: &hst.FSBind{Source: pathSet.nixPath, Target: pathNix, Write: true}},
@@ -83,9 +82,9 @@ func withCacheDir(
Identity: app.Identity,
Container: &hst.ContainerConfig{
- Hostname: formatHostname(app.Name) + "-" + action,
- SeccompFlags: seccomp.AllowMultiarch,
- Tty: dropShell,
+ Hostname: formatHostname(app.Name) + "-" + action,
+ Multiarch: true,
+ Tty: dropShell,
Filesystem: []hst.FilesystemConfigJSON{
{FilesystemConfig: &hst.FSBind{Target: container.AbsFHSEtc, Source: workDir.Append(container.FHSEtc), Special: true}},
{FilesystemConfig: &hst.FSBind{Source: workDir.Append("nix"), Target: pathNix}},