system/desktop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sandboxing

Browse source
This commit is contained in:
root 2026-07-18 11:45:31 -03:00
parent 5f70e8be94
commit 0f1a81c2aa
No known key found for this signature in database
13 changed files with 230 additions and 90 deletions
Download patch file Download diff file Expand all files Collapse all files

17
flake.nix
View file

@ -7,10 +7,10 @@
url = "github:Mic92/sops-nix";
inputs.nixpkgs.follows = "nixpkgs";
};
# microvm = {
# url = "github:microvm-nix/microvm.nix/da28962a2ba84718895b7325f600686c3b4ee099";
# inputs.nixpkgs.follows = "nixpkgs";
# };
microvm = {
url = "github:microvm-nix/microvm.nix";
inputs.nixpkgs.follows = "nixpkgs";
};
disko = {
url = "github:nix-community/disko/latest";
inputs.nixpkgs.follows = "nixpkgs";
@ -40,6 +40,7 @@
sops-nix,
impermanence,
home-manager,
microvm,
...
}:
let
@ -50,7 +51,7 @@
config.allowUnfree = true;
# overlays = [ inputs.neovim-nightly-overlay.overlays.default ];
};
# microvm = inputs.microvm.nixosModules.host;
microvm = inputs.microvm.nixosModules.host;
in
{
nixosConfigurations."${hostname}" = nixpkgs.lib.nixosSystem {
@ -60,7 +61,7 @@
nixpkgs
impermanence
home-manager
# microvm
microvm
sops-nix
;
hostname = hostname;
@ -76,8 +77,8 @@
./home
./firejail.nix
inputs.sops-nix.nixosModules.sops
# inputs.microvm.nixosModules.host
# (import ./vms)
inputs.microvm.nixosModules.host
(import ./microvm/sandbox.nix)
inputs.disko.nixosModules.disko
inputs.impermanence.nixosModules.impermanence
inputs.home-manager.nixosModules.home-manager