45 lines
853 B
Diff
45 lines
853 B
Diff
diff --git a/windmill-worker/nsjail/run.ansible.config.proto b/windmill-worker/nsjail/run.ansible.config.proto
|
|
index 65a8ea700..d4c8c2afc 100644
|
|
--- a/windmill-worker/nsjail/run.ansible.config.proto
|
|
+++ b/windmill-worker/nsjail/run.ansible.config.proto
|
|
@@ -18,16 +18,24 @@ keep_caps: false
|
|
keep_env: true
|
|
mount_proc: true
|
|
|
|
+mount {
|
|
+ src: "/nix/store"
|
|
+ dst: "/nix/store"
|
|
+ is_bind: true
|
|
+}
|
|
+
|
|
mount {
|
|
src: "/bin"
|
|
dst: "/bin"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
mount {
|
|
src: "/lib"
|
|
dst: "/lib"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
|
|
@@ -42,12 +50,14 @@ mount {
|
|
src: "/root/.local/share/uv/tools/ansible"
|
|
dst: "/root/.local/share/uv/tools/ansible"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
mount {
|
|
src: "/usr"
|
|
dst: "/usr"
|
|
is_bind: true
|
|
+ mandatory: false
|
|
}
|
|
|
|
mount {
|