offline vi firejail

Author: functora

nix/configuration.nix

@@ -798,15 +798,45 @@ in {
           ${import ./tabby.nix}/bin/tabby \
             download --model Qwen2.5-Coder-0.5B
         '';
-      };
+      }
+      // fj.mkFirejailCustom {
+        pkg = "vi";
+        exe = "${vi}/bin/vi";
+        profile = pkgs.writeText "fjvi.local" ''
+          no3d
+          nosound
+          apparmor
+          caps.drop all
+          machine-id
+          net none
+          netfilter
+          nodvd
+          nogroups
+          noinput
+          nonewprivs
+          noprinters
+          noroot
+          notv
+          nou2f
+          novideo
+          shell none
+
+          disable-mnt
+          seccomp
+          x11 none
 
+          dbus-system none
+          dbus-user none
+
+          restrict-namespaces
+        '';
+      };
     #
     # Home
     #
     home-manager.users.${config.services.functora.userName} = {
       home.stateVersion = "22.11";
       home.packages = with pkgs; [
-        vi
         tree
         s-tui
         qutebrowser

nix/firejail.nix

@@ -14,11 +14,12 @@ in rec {
     net ? false,
     grp ? null,
     cfg ? "",
+    profile ? mkFirejailProfile {inherit pkg dir net grp cfg;},
     exe,
   }: {
     "${pkg}" = {
       executable = exe;
-      profile = mkFirejailProfile {inherit pkg dir net grp cfg;};
+      inherit profile;
     };
   };
   mkFirejailProfile = {

pub/functora/functora.cabal

@@ -437,7 +437,6 @@ library bolt11
 
 library round
   import:          pkg-round
-  build-depends:   functora
   exposed:         True
   visibility:      public
   exposed-modules: Functora.Round
@@ -471,12 +470,10 @@ test-suite functora-test
     , qrcode-core
     , QuickCheck
     , quickcheck-instances
-    , smallcheck
     , string-qq
     , tasty
     , tasty-hunit
     , tasty-quickcheck
-    , tasty-smallcheck
     , text
     , universum