9 Commits

Author	SHA1	Message	Date
Александр Бантьев	69c5553aeb	Pass /root through chroot ... This PR adds a `/root:root` mapping so that users with UID 0 can run bundles that use `$HOME`. Related to #33 .	2019-01-30 22:30:43 +03:00
Michael Bishop	7f12322399	add an escape-hatch option to allow things like xdg-open to work inside the sandbox	2018-10-19 17:05:29 -03:00
Matthew Bauer	89185dbd8f	Add home dir map	2018-04-10 13:04:01 -05:00
Michael Bishop	8a344343ba	dont leak the /proc/self/setgroups fd	2018-04-05 15:24:19 -03:00
Matthew Bauer	5e49fbc4a0	Cleanup Nix bundling ... The special case of Nix bundling is useful for handling the hidden dependencies of Nix. It will automatically add them for you when you do this: $ nix-bundle nix /bin/nix	2018-04-04 16:19:32 -05:00
Matthew Bauer	a5060764cb	Add etc and usr to mounts ... Seems to be okay to do this. Sacrifices purity a little bit though	2018-04-04 16:18:47 -05:00
Matthew Bauer	9e64967a3b	Indentation and cleanup	2018-04-04 15:34:43 -05:00
Michael Bishop	f2fa3ec8e2	give directions on how to fix namespaces when they are disabled	2018-04-04 14:32:40 -03:00
michael bishop	630e89d1d1	overhaul most of nix-bundle ... pulled nix-user-chroot into the same repo put the startup command into a bash script, so the tarball job knows its deps changed nix-user-chroot into a c++ program added CLI flags to allow configuring the sandbox it produces	2018-02-19 21:45:03 -04:00