diff options
Diffstat (limited to 'pkgs/tools/security/isolate/default.nix')
-rw-r--r-- | pkgs/tools/security/isolate/default.nix | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/pkgs/tools/security/isolate/default.nix b/pkgs/tools/security/isolate/default.nix index b745af75d8b7f..a1d67c49d531d 100644 --- a/pkgs/tools/security/isolate/default.nix +++ b/pkgs/tools/security/isolate/default.nix @@ -3,7 +3,10 @@ , fetchFromGitHub , asciidoc , libcap +, pkg-config +, systemdLibs , installShellFiles +, nixosTests }: stdenv.mkDerivation rec { @@ -20,26 +23,33 @@ stdenv.mkDerivation rec { nativeBuildInputs = [ asciidoc installShellFiles + pkg-config ]; buildInputs = [ libcap.dev + systemdLibs.dev ]; - buildFlags = [ - "isolate" - "isolate.1" + patches = [ + ./take-config-file-from-env.patch ]; installPhase = '' runHook preInstall install -Dm755 ./isolate $out/bin/isolate + install -Dm755 ./isolate-cg-keeper $out/bin/isolate-cg-keeper + install -Dm755 ./isolate-check-environment $out/bin/isolate-check-environment installManPage isolate.1 runHook postInstall ''; + passthru.tests = { + isolate = nixosTests.isolate; + }; + meta = { description = "Sandbox for securely executing untrusted programs"; mainProgram = "isolate"; |