Post #3326887
2026-06-15 17:32 UTC
Why not use Nixpak? (which doesn’t require SUID binaries)
Replies (1)
-
@Mordikan@kbin.earth 2026-06-16 06:23
That's honestly a fair point. Firejail is simpler to use, but is still imperatively driven. Nixpak relies on declarative expression which is kinda the whole selling point of NixOS. For SUID, again I think its a matter of complexity vs containment. One is easier, one is better isolated. Firejail still might be the better choice in this given case, but that would depend on whether or not this is a per-user setup. Nixpak would win outright I would think outside that just based on reproducibility. I don't think the user shared details on why/who this would be for.