From 7f2c0af5ad6ad660c7b4d7d89a5a0b34243b7cee Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Sun, 30 Mar 2025 22:55:00 +0900
Subject: [PATCH] fst: set multiarch bit
Signed-off-by: Ophestra <cat@gensokyo.uk>
---
fst/sandbox.go | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/fst/sandbox.go b/fst/sandbox.go
index fadf39e..8bbc076 100644
--- a/fst/sandbox.go
+++ b/fst/sandbox.go
@@ -97,6 +97,10 @@ func (s *SandboxConfig) ToContainer(sys SandboxSys, uid, gid *int) (*sandbox.Par
Seccomp: s.Seccomp,
}
+ if s.Multiarch {
+ container.Seccomp |= seccomp.FlagMultiarch
+ }
+
/* this is only 4 KiB of memory on a 64-bit system,
permissive defaults on NixOS results in around 100 entries
so this capacity should eliminate copies for most setups */