diff --git a/modules/netns-isolation.nix b/modules/netns-isolation.nix index 5a19914..81acfc5 100644 --- a/modules/netns-isolation.nix +++ b/modules/netns-isolation.nix @@ -101,7 +101,7 @@ in { boot.kernel.sysctl."net.ipv4.ip_forward" = true; security.wrappers.netns-exec = { - source = "${pkgs.nix-bitcoin.netns-exec}/netns-exec"; + source = pkgs.nix-bitcoin.netns-exec; capabilities = "cap_sys_admin=ep"; owner = cfg.allowedUser; permissions = "u+rx,g+rx,o-rwx"; diff --git a/pkgs/netns-exec/default.nix b/pkgs/netns-exec/default.nix index bafd516..5998549 100644 --- a/pkgs/netns-exec/default.nix +++ b/pkgs/netns-exec/default.nix @@ -5,7 +5,6 @@ stdenv.mkDerivation { buildInputs = [ pkgs.libcap ]; src = ./src; installPhase = '' - mkdir -p $out - cp main $out/netns-exec + cp main $out ''; }