Merge pull request #3207 from input-output-hk/chore/LW-10649-no-nix-chroot

[LW-10649] Fix installing & running with strict AppArmor

Author: michalrus

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## vNext
 
+### Fixes
+
+- Fixed installation and running on Ubuntu 24.04 LTS with AppArmor enabled by removing the `chroot` ([PR 3207](https://github.com/input-output-hk/daedalus/pull/3207))
+
 ### Chores
 
 - Updated `@cardano-foundation/ledgerjs-hw-app-cardano` to version `7.1.3` and `@trezor/connect` to version `9.3.0` ([PR 3093](https://github.com/input-output-hk/daedalus/pull/3215))

flake.lock

@@ -13,6 +13,8 @@
     tullia.flake = false; # otherwie, +1k dependencies in flake.lock…
     flake-compat.url = "github:input-output-hk/flake-compat";
     flake-compat.flake = false;
+    nix-bundle-exe.url = "github:3noch/nix-bundle-exe";
+    nix-bundle-exe.flake = false;
   };
 
   outputs = inputs: let

flake.nix

@@ -49,7 +49,7 @@ let
       xcbuild
       perl
     ] else [
-      internal.electronBin
+      internal.relocatableElectron
       winePackages.minimal
     ]));
     name = "daedalus";

installers/nix/linux.nix

@@ -180,6 +180,7 @@ rec {
   srcWithoutNix = pkgs.lib.cleanSourceWith {
     src = inputs.self;
     filter = name: type: !(type == "regular" && (
+      pkgs.lib.hasInfix "-source/nix/" name ||
       pkgs.lib.hasSuffix ".nix" name ||
       pkgs.lib.hasSuffix ".hs" name ||
       pkgs.lib.hasSuffix ".cabal" name