I try to use firejail on nixos when I can’t do something in the build sandbox.
It’s painful, and I’m always on the lookout for something better. I’d at least like a portal-ish system where I can easily add things to a sandbox while it’s running.
Edit: if anyone has any issues or discussions about this I’d like to contribute.




You’re still using their hardware for the coordinator, artifact storage, etc. aren’t you?
The last thing I want to be doing is defending microsoft, but this is inevitable in any free service. In fact this seems like one of the least-bad ways of enshittifying.
We should all be moving to self-hosting or shared hosting through a non-profit, but neither of those are going to be free.