container: optionally isolate host abstract UNIX domain sockets via landlock

package.nix

@@ -89,19 +89,18 @@ buildGoModule rec {
     GO_TEST_SKIP_ACL = 1;
   };
 
-  buildInputs =
-    [
-      libcap
-      libffi
-      libseccomp
-      acl
-      wayland
-    ]
-    ++ (with xorg; [
-      libxcb
-      libXau
-      libXdmcp
-    ]);
+  buildInputs = [
+    libcap
+    libffi
+    libseccomp
+    acl
+    wayland
+  ]
+  ++ (with xorg; [
+    libxcb
+    libXau
+    libXdmcp
+  ]);
 
   nativeBuildInputs = [
     pkg-config
@@ -137,17 +136,16 @@ buildGoModule rec {
         }
     '';
 
-  passthru.targetPkgs =
-    [
-      go
-      gcc
-      xorg.xorgproto
-      util-linux
+  passthru.targetPkgs = [
+    go
+    gcc
+    xorg.xorgproto
+    util-linux
 
-      # for go generate
-      wayland-protocols
-      wayland-scanner
-    ]
-    ++ buildInputs
-    ++ nativeBuildInputs;
+    # for go generate
+    wayland-protocols
+    wayland-scanner
+  ]
+  ++ buildInputs
+  ++ nativeBuildInputs;
 }