nixos/sandbox: improve documentation.
This was put together based on feedback from LnL on IRC.
This commit is contained in:
parent
0f8594170a
commit
f098e60ecf
@ -130,11 +130,13 @@ in
|
||||
default = false;
|
||||
description = "
|
||||
If set, Nix will perform builds in a sandboxed environment that it
|
||||
will set up automatically for each build. This prevents
|
||||
impurities in builds by disallowing access to dependencies
|
||||
outside of the Nix store. This isn't enabled by default for
|
||||
performance. It doesn't affect derivation hashes, so changing
|
||||
this option will not trigger a rebuild of packages.
|
||||
will set up automatically for each build. This prevents impurities
|
||||
in builds by disallowing access to dependencies outside of the Nix
|
||||
store by using network and mount namespaces in a chroot environment.
|
||||
This isn't enabled by default for possible performance impacts due to
|
||||
the initial setup time of a sandbox for each build. It doesn't affect
|
||||
derivation hashes, so changing this option will not trigger a rebuild
|
||||
of packages.
|
||||
";
|
||||
};
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user