every-channel/every.channel
1
0
Fork 0
Code Releases Activity Actions 2

Harden forge NBC worker runtime and MVPD selection

Browse source
This commit is contained in:
every.channel 2026-04-03 03:11:11 -07:00
parent 3402f7dab2
commit 8065860449
No known key found for this signature in database
4 changed files with 102 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/modules/ec-node.nix
View file

@ -646,6 +646,7 @@ in
SystemCallArchitectures = "native";
ReadWritePaths =
lib.optionals cfg.control.enable [ "/run/every-channel" ]
++ lib.optionals isNbc [ "/tmp" ]
++ lib.optionals isNbc [ cfg.nbc.profileDir cfg.nbc.authScreenshotDir ];
};
@ -656,6 +657,7 @@ in
EVERY_CHANNEL_NBC_CHROME_PATH = cfg.nbc.chromeBinary;
EVERY_CHANNEL_NBC_PROFILE_DIR = cfg.nbc.profileDir;
EVERY_CHANNEL_NBC_NO_SANDBOX = if cfg.nbc.noSandbox then "1" else "0";
HOME = "/var/lib/every-channel";
};
};
})