Commit 04b9fcca authored by zowoq's avatar zowoq
Browse files

nixos/podman: wrap /run/wrappers for setuid shadow binaries 

adding it here so it only needs to be done once
parent 8ee6a032

nixos/modules/virtualisation/podman/default.nix

+2 −0
Original line number Diff line number Diff line
@@ -7,6 +7,8 @@ let 


  podmanPackage = (pkgs.podman.override {

    extraPackages = cfg.extraPackages

      # setuid shadow

      ++ [ "/run/wrappers" ]

      ++ lib.optional (builtins.elem "zfs" config.boot.supportedFilesystems) config.boot.zfs.package;

  });