aboutsummaryrefslogtreecommitdiffhomepage
path: root/flake.nix
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-01-17 22:56:16 +0900
committerOphestra <cat@gensokyo.uk>2025-01-17 22:56:16 +0900
commitc4de45021759e9c384485a451dfdf9c1d73f04ea (patch)
treeaeff30eccc26ae03374212dca610bd03f1cc58cc /flake.nix
parentb60c01f4405ec3b5cc4a740fe994c3b9f39cf01f (diff)
nix: do not force static linking on nix
In a typical Nix or NixOS-based setup, the entire /nix/store directory is available to the sandbox. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'flake.nix')
-rw-r--r--flake.nix24
1 files changed, 22 insertions, 2 deletions
diff --git a/flake.nix b/flake.nix
index 0277975a..6d8e66eb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -166,8 +166,28 @@
go
gcc
]
- ++ fortify.buildInputs
- ++ fortify.nativeBuildInputs;
+ # buildInputs
+ ++ (
+ with pkgsStatic;
+ [
+ musl
+ libffi
+ acl
+ wayland
+ wayland-protocols
+ ]
+ ++ (with xorg; [
+ libxcb
+ libXau
+ libXdmcp
+ ])
+ )
+ # nativeBuildInputs
+ ++ [
+ pkg-config
+ wayland-scanner
+ makeBinaryWrapper
+ ];
};
fhs = fhs.env;