buildFHSEnvBubblewrap: do not use read-only bind on /nix (#463881)

2025-11-22 00:04:45 +00:00
parent d0c6de31f0 1ccfe2eb26
commit 64a5bece09
1 changed files with 1 additions and 1 deletions
@@ -288,7 +288,7 @@ let
        ${optionalString unshareUts "--unshare-uts"}
        ${optionalString unshareCgroup "--unshare-cgroup"}
        ${optionalString dieWithParent "--die-with-parent"}
-        --ro-bind /nix /nix
+        --bind /nix /nix
        ${optionalString privateTmp "--tmpfs /tmp"}
        # Our glibc will look for the cache in its own path in `/nix/store`.
        # As such, we need a cache to exist there, because pressure-vessel