From a1148edd006f9bd0c802fd63fa1338f57623326a Mon Sep 17 00:00:00 2001 From: Ophestra Date: Sat, 4 Jan 2025 00:16:41 +0900 Subject: [PATCH] fst/config: allocate filesystem slice Signed-off-by: Ophestra --- fst/config.go | 16 +++++++++++----- 1 file changed, 11 insertions(+), 5 deletions(-) diff --git a/fst/config.go b/fst/config.go index ea7d45a..8827b29 100644 --- a/fst/config.go +++ b/fst/config.go @@ -136,11 +136,17 @@ func (s *SandboxConfig) Bwrap(os linux.System) (*bwrap.Config, error) { } conf := (&bwrap.Config{ - Net: s.Net, - UserNS: s.UserNS, - Hostname: s.Hostname, - Clearenv: true, - SetEnv: s.Env, + Net: s.Net, + UserNS: s.UserNS, + Hostname: s.Hostname, + Clearenv: true, + SetEnv: s.Env, + + /* this is only 4 KiB of memory on a 64-bit system, + permissive defaults on NixOS results in around 100 entries + so this capacity should eliminate copies for most setups */ + Filesystem: make([]bwrap.FSBuilder, 0, 256), + NewSession: !s.NoNewSession, DieWithParent: true, AsInit: true,