Unverified Commit ebc92b00 authored by Jörg Thalheim's avatar Jörg Thalheim Committed by GitHub
Browse files

runInLinuxVM/virtiofsd: disable seccomp (#375792)

parents a910ca0e 85aea8d7

pkgs/build-support/vm/default.nix

+4 −2
Original line number Diff line number Diff line
@@ -261,8 +261,10 @@ rec { 
    cat > ./run-vm <<EOF

    #! ${bash}/bin/sh

    ''${diskImage:+diskImage=$diskImage}

    ${pkgs.virtiofsd}/bin/virtiofsd --xattr --socket-path virtio-store.sock --sandbox none --shared-dir "${storeDir}" &

    ${pkgs.virtiofsd}/bin/virtiofsd --xattr --socket-path virtio-xchg.sock --sandbox none --shared-dir xchg &

    # GitHub Actions runners seems to not allow installing seccomp filter: https://github.com/rcambrj/nix-pi-loader/issues/1#issuecomment-2605497516

    # Since we are running in a sandbox already, the difference between seccomp and none is minimal

    ${pkgs.virtiofsd}/bin/virtiofsd --xattr --socket-path virtio-store.sock --sandbox none --seccomp none --shared-dir "${storeDir}" &

    ${pkgs.virtiofsd}/bin/virtiofsd --xattr --socket-path virtio-xchg.sock --sandbox none --seccomp none --shared-dir xchg &

    ${qemuCommand}

    EOF