_module.args

Additional arguments passed to each module in addition to ones like lib, config, and pkgs, modulesPath.

This option is also available to all submodules. Submodules do not inherit args from their parent module, nor do they provide args to their parent module or sibling submodules. The sole exception to this is the argument name which is provided by parent modules to a submodule and contains the attribute name the submodule is bound to, or a unique generated name if it is not bound to an attribute.

Some arguments are already passed by default, of which the following cannot be changed with this option:

lib: The nixpkgs library.
config: The results of all options after merging the values from all modules together.
options: The options declared in all modules.
specialArgs: The specialArgs argument passed to evalModules.
All attributes of specialArgs

Whereas option values can generally depend on other option values thanks to laziness, this does not apply to imports, which must be computed statically before anything else.

For this reason, callers of the module system can provide specialArgs which are available during import resolution.

For NixOS, specialArgs includes modulesPath, which allows you to import extra modules from the nixpkgs package tree without having to somehow make the module aware of the location of the nixpkgs or NixOS directories.
```
{ modulesPath, ... }: {
  imports = [
    (modulesPath + "/profiles/minimal.nix")
  ];
}
```

For NixOS, the default value for this option includes at least this argument:

pkgs: The nixpkgs package set according to the nixpkgs.pkgs option.

Type: lazy attribute set of raw value

Declared by:

<nixpkgs/lib/modules.nix>

nixjail.bwrap.profiles

Configure profiles for the packages list, using the further options to configure them with bwrap

Type: list of (submodule)

Default: [ ]

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.packages

Packages to be wrapped with bwrap using the configs on the profile

Type: nixpkgs overlay

Default: <function>

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.args

arguments to pass to the packages

Type: string

Default: "\"$@\""

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.autoBindHome

Automatically creates a home directory on home_dir_root

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.defaultBinds

Adds the following read-only binds:

“~/.config/mimeapps.list” “~/.local/share/applications/mimeapps.list” “~/.config/dconf” “~/.config/gtk-3.0/settings.ini” “~/.config/gtk-4.0/settings.ini” “~/.gtkrc-2.0”

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.dev

If true add --dev-bind-try /dev /dev

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.dri

If true add --dev-bind-try /dev/dri /dev/dri

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.extraConfig

Extra configs for bwrap

Type: list of string

Default: [ ]

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.homeDirRoot

Root for the autoBindHome

Type: string

Default: "~/bwrap"

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.install

Add package to environment.systemPackages

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.keepSession

Fixes “cannot set terminal process group (-1)” by adding --new-session but is not recommended because of a security issue with TIOCSTI [1] [1] - https://wiki.archlinux.org/title/Bubblewrap#New_session

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.ldCache

Add ld.so.conf and ld.so.cache symlinks (both 32 and 64 bit glibcs)

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.net

If true add --share-net

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.roBinds

Adds --ro-bind-try $(readlink -mn $${cfg.from} $${cfg.to})

Type: list of (string or (submodule))

Default: [ ]

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.rwBinds

Adds --bind-try $(readlink -mn $${cfg.from} $${cfg.to})

Type: list of (string or (submodule))

Default: [ ]

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.symlinkJoin

If false it will disable the merge of the generated bwrapped package with the original content (like desktop entries, libs and man pages)

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.tmp

If true add --bind-try /tmp /tmp

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.unshareAll

If false removes --unshare-all, not recommended!

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.bwrap.profiles.*.xdg

If true add --bind-try $XDG_RUNTIME_DIR $XDG_RUNTIME_DIR

Type: boolean or value “ro” (singular enum)

Default: "ro"

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles

Configure profiles for the packages list, using the further options to configure them with bwrap

Type: list of (submodule)

Default: [ ]

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.args

arguments to pass to the packages

Type: string

Default: "\"$@\""

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.autoBindHome

Automatically creates a home directory on home_dir_root

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.defaultBinds

Adds the following read-only binds:

“~/.config/mimeapps.list” “~/.local/share/applications/mimeapps.list” “~/.config/dconf” “~/.config/gtk-3.0/settings.ini” “~/.config/gtk-4.0/settings.ini” “~/.gtkrc-2.0”

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.dev

If true add --dev-bind-try /dev /dev

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.dri

If true add --dev-bind-try /dev/dri /dev/dri

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.extraConfig

Extra configs for bwrap

Type: list of string

Default: [ ]

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.homeDirRoot

Root for the autoBindHome

Type: string

Default: "~/bwrap"

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.install

Add package to environment.systemPackages

Type: boolean

Default: true

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.keepSession

Type: boolean

Default: false

Declared by:

<shiryel/nixjail>

nixjail.fhs.profiles.*.multiPkgs

Packages installed once on x86 systems and twice on x86_64 systems. On x86 they are merged with packages from targetPkgs. On x86_64 they are added to targetPkgs and in addition their 32bit versions are also installed. The final directory structure looks as follows: /lib32 will include 32bit libraries from multiPkgs /lib64 will include 64bit libraries from multiPkgs and targetPkgs /lib will link to /lib32

Type: function that evaluates to a(n) list of package

Default: <function>

Declared by: