fix: create chromium policy mountpoint before sandboxing #26

Merged
addison merged 1 commit from dev-bot/fix-chromium-policy-mount into main 2026-09-17 07:15:21 -04:00 AGit
Collaborator

Create real Chromium policy mountpoints before Bubblewrap makes the root read-only, preserve generated managed policies, and cover the setup with the focused Nix check. Verified with the student-chromium-policy build, shell syntax validation, and a runtime Bubblewrap bind-mount test.

Create real Chromium policy mountpoints before Bubblewrap makes the root read-only, preserve generated managed policies, and cover the setup with the focused Nix check. Verified with the student-chromium-policy build, shell syntax validation, and a runtime Bubblewrap bind-mount test.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kwila/kwilabook!26
No description provided.