Ryan Yin 0fe12bef5a fix(nix): preserve default sandbox shell ...

Setting nix.settings.sandbox-paths replaces Nix compiled sandbox defaults. Keeping only /dev/net made local builds lose the sandbox shell that normally provides /bin/sh, which broke upstream scripts with /bin/sh shebangs in packages such as X11-fonts and openldap.

Use extra-sandbox-paths for /dev/net instead. This keeps Nix daemon defaults intact, including the configured sandbox shell, while still allowing builds that need /dev/net.

Add eval coverage for both Linux output sets so future changes keep /dev/net in extra-sandbox-paths and do not reintroduce an explicit sandbox-paths override.

2026-07-06 23:04:16 +08:00

..

networking

chore: nixpaks - update dbus policies

2025-11-01 21:26:01 +08:00

btrbk.nix

feat: adjust btrbk - decrease snapshots count

2024-10-31 00:08:54 +08:00

core.nix

chore: power management

2025-08-19 23:56:19 +08:00

default.nix

feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'

2025-07-30 12:17:24 +08:00

i18n.nix

feat: refactor, hyprland - greet with autologin

2023-12-18 00:32:41 +08:00

kernel-hardening.nix

fix: mitigate Dirty Frag LPE vulnerabilities

2026-05-14 11:54:36 +08:00

monitoring.nix

Nixos 26.05 (#261)

2026-06-01 10:02:49 +08:00

nix.nix

fix(nix): preserve default sandbox shell

2026-07-06 23:04:16 +08:00

packages.nix

feat: add nvme-cli

2026-03-16 09:25:28 +08:00

remote-building.nix

feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'

2025-07-30 12:17:24 +08:00

ssh.nix

Nixos 26.05 (#261)

2026-06-01 10:02:49 +08:00

user-group.nix

feat(ai): add webdav mount (#253)

2026-03-19 22:25:48 +08:00

zram.nix

feat: idols-ai - add new data disk via disko (#250)

2026-03-18 22:26:08 +08:00