nixos/podman: wrap /run/wrappers for setuid shadow binaries

adding it here so it only needs to be done once
2023-02-14 19:22:24 +10:00
parent 8ee6a032ca
commit 04b9fcca93
1 changed files with 2 additions and 0 deletions
@@ -7,6 +7,8 @@ let

  podmanPackage = (pkgs.podman.override {
    extraPackages = cfg.extraPackages
+      # setuid shadow
+      ++ [ "/run/wrappers" ]
      ++ lib.optional (builtins.elem "zfs" config.boot.supportedFilesystems) config.boot.zfs.package;
  });