nix.conf: Set sandbox-fallback = false

For security, we don't want the sandbox to be disabled silently.
This commit is contained in:
Eelco Dolstra 2019-08-27 21:17:20 +02:00
parent fa29f98bb5
commit 35c1c170d7

View file

@ -8,7 +8,9 @@ let
nix = cfg.package.out;
isNix20 = versionAtLeast (getVersion nix) "2.0pre";
nixVersion = getVersion nix;
isNix20 = versionAtLeast nixVersion "2.0pre";
makeNixBuildUser = nr:
{ name = "nixbld${toString nr}";
@ -61,6 +63,9 @@ let
builders =
''}
system-features = ${toString cfg.systemFeatures}
${optionalString (versionAtLeast nixVersion "2.3pre") ''
sandbox-fallback = false
''}
$extraOptions
END
'' + optionalString cfg.checkConfig (