Skip to content

pressure-vessel: Make /nix available read-only, if it exists

Simon McVittie requested to merge wip/nix into master

On NixOS, all hard-coded paths in libraries point into /nix, so mounting it is going to be necessary (although not sufficient) to get pressure-vessel working on NixOS.

Manual test, in an updated SteamLinuxRuntime or SteamLinuxRuntime_soldier depot:

./run -- xterm
sudo mkdir /nix
sudo touch /nix/not-really
./run -- xterm

and in the xterm:

ls -al /nix

Expected result: /nix exists in the container if and only if it exists outside the container.

Partially addresses https://github.com/NixOS/nixpkgs/issues/100655

/cc @denittis

Split out from !176 (merged).

Merge request reports