container: optionally isolate host abstract UNIX domain sockets via landlock

package.nix

@@ -89,18 +89,19 @@ buildGoModule rec {
     GO_TEST_SKIP_ACL = 1;
   };
 
-  buildInputs = [
+  buildInputs =
-    libcap
+    [
-    libffi
+      libcap
-    libseccomp
+      libffi
-    acl
+      libseccomp
-    wayland
+      acl
-  ]
+      wayland
-  ++ (with xorg; [
+    ]
-    libxcb
+    ++ (with xorg; [
-    libXau
+      libxcb
-    libXdmcp
+      libXau
-  ]);
+      libXdmcp
+    ]);
 
   nativeBuildInputs = [
     pkg-config
@@ -136,16 +137,17 @@ buildGoModule rec {
         }
     '';
 
-  passthru.targetPkgs = [
+  passthru.targetPkgs =
-    go
+    [
-    gcc
+      go
-    xorg.xorgproto
+      gcc
-    util-linux
+      xorg.xorgproto
+      util-linux
 
-    # for go generate
+      # for go generate
-    wayland-protocols
+      wayland-protocols
-    wayland-scanner
+      wayland-scanner
-  ]
+    ]
-  ++ buildInputs
+    ++ buildInputs
-  ++ nativeBuildInputs;
+    ++ nativeBuildInputs;
 }