nixos/sandbox: improve documentation.

This was put together based on feedback from LnL on IRC.
This commit is contained in:
Brandon Elam Barker 2018-06-07 16:43:52 -04:00 committed by Jörg Thalheim
parent 0f8594170a
commit f098e60ecf

View File

@ -130,11 +130,13 @@ in
default = false; default = false;
description = " description = "
If set, Nix will perform builds in a sandboxed environment that it If set, Nix will perform builds in a sandboxed environment that it
will set up automatically for each build. This prevents will set up automatically for each build. This prevents impurities
impurities in builds by disallowing access to dependencies in builds by disallowing access to dependencies outside of the Nix
outside of the Nix store. This isn't enabled by default for store by using network and mount namespaces in a chroot environment.
performance. It doesn't affect derivation hashes, so changing This isn't enabled by default for possible performance impacts due to
this option will not trigger a rebuild of packages. the initial setup time of a sandbox for each build. It doesn't affect
derivation hashes, so changing this option will not trigger a rebuild
of packages.
"; ";
}; };