container: optionally isolate host abstract UNIX domain sockets via landlock

package.nix

@@ -89,18 +89,19 @@ buildGoModule rec {
     GO_TEST_SKIP_ACL = 1;
   };
 
-  buildInputs = [
-    libcap
-    libffi
-    libseccomp
-    acl
-    wayland
-  ]
-  ++ (with xorg; [
-    libxcb
-    libXau
-    libXdmcp
-  ]);
+  buildInputs =
+    [
+      libcap
+      libffi
+      libseccomp
+      acl
+      wayland
+    ]
+    ++ (with xorg; [
+      libxcb
+      libXau
+      libXdmcp
+    ]);
 
   nativeBuildInputs = [
     pkg-config
@@ -136,16 +137,17 @@ buildGoModule rec {
         }
     '';
 
-  passthru.targetPkgs = [
-    go
-    gcc
-    xorg.xorgproto
-    util-linux
+  passthru.targetPkgs =
+    [
+      go
+      gcc
+      xorg.xorgproto
+      util-linux
 
-    # for go generate
-    wayland-protocols
-    wayland-scanner
-  ]
-  ++ buildInputs
-  ++ nativeBuildInputs;
+      # for go generate
+      wayland-protocols
+      wayland-scanner
+    ]
+    ++ buildInputs
+    ++ nativeBuildInputs;
 }