container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 12:00:52 +09:00
parent 69a4ab8105
commit 5db0714072
17 changed files with 375 additions and 9 deletions
--- a/nixos.nix
+++ b/nixos.nix
@@ -132,6 +132,7 @@ in
                        devel
                        userns
                        net
+                        abstract
                        device
                        tty
                        multiarch