test/sandbox/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14

{
  writeShellScript,
  callPackage,

  version,
}:
writeShellScript "check-sandbox" ''
  set -e
  ${callPackage ./mount.nix { inherit version; }}/bin/test
  ${callPackage ./fs.nix { inherit version; }}/bin/test
  ${callPackage ./seccomp.nix { inherit version; }}/bin/test

  touch /tmp/sandbox-ok
''