(zilch nixpkgs): Attempt to limit Nix expression leakage

Change-Id: Ifab2c0e7784145b9f57ca2c3cb713a476a6a6964
This commit is contained in:
puck 2025-11-24 18:37:10 +00:00
parent bf1f5b0ed9
commit 8385c3ac9b
3 changed files with 58 additions and 5 deletions

View file

@ -65,6 +65,13 @@ written. See the documentation at https://puck.moe/zilch/docs/.
*--verbose*::
Increase the verbosity configured in the Nix daemon.
*-T*::
*--trust-all*::
By default, Nix expressions can only access the paths in NIX_PATH,
plus the source directories and the directory of the configuration.
Setting this flag drops this restriction, at the cost of Nix
expressions being able to escape the Nix sandbox easier.
*-L*::
*--print-build-logs*::
Print derivation logs as they come in.