From f10d3170cccc852e21e10bce521999fe1e85aceb Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Sun, 23 Aug 2026 19:51:18 +0200
Subject: modules/direnv: Implement a landrun based sandbox for dev-shells

---
 modules/by-name/di/direnv/landrun-fish.sh | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100755 modules/by-name/di/direnv/landrun-fish.sh

(limited to 'modules/by-name/di/direnv/landrun-fish.sh')

diff --git a/modules/by-name/di/direnv/landrun-fish.sh b/modules/by-name/di/direnv/landrun-fish.sh
new file mode 100755
index 00000000..09687afb
--- /dev/null
+++ b/modules/by-name/di/direnv/landrun-fish.sh
@@ -0,0 +1,30 @@
+#! /usr/bin/env sh
+
+export NO_DIRENV_LOAD=true
+landrun \
+    --env PATH \
+    --env USER \
+    --env IN_NIX_SHELL \
+    --env NIX_SHELL_LEVEL \
+    --env NO_DIRENV_LOAD \
+    --env SHLVL \
+    --rox /nix/store \
+    --ro /etc/ \
+    --ro /proc/ \
+    --rw /dev/ \
+    --rw "/run/user/$(id --user)" \
+    --ro "$HOME/.config" \
+    --rw "$HOME/.cache" \
+    --ro "$HOME/.local/share/nix/trusted-settings.json" \
+    --rw "$HOME/.local/share/nix/repl-history" \
+    --rw "$HOME/.local/share/task/" \
+    --rw "$HOME/.local/share/nvim/" \
+    --rw "$HOME/.local/share/cargo/" \
+    --rw "$HOME/.local/share/ctpv/" \
+    --rw "$HOME/.local/share/direnv" \
+    --ro "$HOME/.config/fish/" \
+    --connect-tcp 80 \
+    --connect-tcp 443 \
+    -- fish "$@"
+
+# vim: ft=sh
-- 
cgit v1.3.1