Start a nix-shell with only the current directory mounted (similar to a container)

ᅙᄉᅙ

4/9/24, 5:19 PM

I am looking for a way to launch a shell with specific packages installed within, but no unnecessary access to the rest of the system, i.e:

Only the current directory (pwd) mounted, no access to other parts of the filesystem*
Only the requested packages being available*, plus the shell
Being able to disable network access would be a plus
Generally no access to other parts of the system*
So I'm looking for an environment similar to what can be achieved with docker: (or podman, etc...)
```
docker run -it -v "$PWD:/pwd" -w /pwd $someImage
```
or Guix:
```
guix shell --pure --container --network $somePackage
```

*except strictly necessary ones

Is this possible with nix? The advantage would be that storage for the contents of packages is shared with the host system, familiarity with the system, and so on; and, compared to guix, that Nix has a lot more packages available..

125

1 + 1

containers

nixos

djdomi

4/9/24, 6:35 PM

I think you look for something like a jail

Score:0

Server

Ginnungagap

4/10/24, 8:50 AM

containers' underlying technologies are chroots and namespaces which you can use to achieve what you're looking for.

The chroot part which will limit filesystem view is often called a jail (by analogy with BSD), network access can be restricted via namespaces.

However, if you're looking for a copy-pastable solution, I'd highly suggest you stick with containers which will wrap most of it for you.

+ 1

ᅙᄉᅙ

4/11/24, 7:04 AM

This is a question about `nix-shell` specifically.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Start a nix-shell with only the current directory mounted (similar to a container)

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.