PoolloverNathan @ PoolloverNathan @programming.dev

Posts

3

Comments

483

Joined

2 yr. ago

I use NixOS (plasma, setting up xmonad) btw

Made a Nix library for this. For a simple setup you can just build this (untested) and run the result:

 nix

    
import ./encase.nix {
  name = "firefox";
  rw.home.nathan = /home/nathan/home-for/firefox;
  # other dependencies it might need...
  tmp = /tmp; # fresh tmpfs for this sandbox
  network = true;
  command = pkgs.firefox;
}

  

It doesn't have user isolation yet, so if it escapes the browser and the chroot (which doesn't have a /proc unless you set proc = /proc;, and runs in a PID namespace either way) your files are still at risk. However, this is still pretty secure, and you can run the script itself as a different user (it creates a new UID namespace so chrooting can be done without root).

Actually I want to write an app browser for NixOS now.

I'm glad Voyager puts baby icons on new accounts; it usually resembles how they look in real life.

!holocaustjokes@lemmygrad.ml

Edit: Not associated with lemmygrad or anything in those instances. That was just the instance that sounded most likely to have this community.

Use asterisks for in-word italics: infamous → infamous.

I calmly remove my USB labeled “oh shit” from my pocket, insert it, and reboot.

That's why I put Linux on my house.

I just add this to my system config:

    ~~~nix
networking.wireless = {
  enable = true;
  networks = import ./networks.nix;
};
~~~

  

Then I define my networks in a gitignored file and I'm good to go.

The closest I've been to Windows since I've installed Linux is putting its partition in the NixOS (gen 19) filesystem list.

It does narrow out America, at least.

Bread, squick, milk, squick

alias git="DISPLAY= git"

Careful of the venn diagram — if you're talking to a member of a Linux community on Lemmy, chances are they aren't anti-furry.

• [x] Lemmy
• [ ] Star Trek
• [ ] Star Wars
• [x] Tech
• [x] Programming
• [×] Unicode
• [x] RPG gaming (D&D)
• [ ] Anime
• [ ] Comic books
• [ ] Furry

Omnipotent, just not omniscient.

The Microsoft Store adds a lot of restrictions to their programs (example of Python's problems).

Linux security noob here but can't you just run the browser in a chroot with everything isolated?

Ah, the old Lemmy yachtaroo

Rizz? Can we just send that word back to hell already?