Seems fine, but what is the motivation/effect? Will looking up localhost still work?

also, other tests fail due to a missing /etc/protocols leading to them not knowing what tcp is, so they cant create a tcp socket

i also just had a thought, nix.conf can inject paths like /bin/sh into the sandbox, maybe it can get these files also?

i can confirm that nix.sandboxPaths = [ "/etc/nsswitch.conf" "/etc/protocols" ]; fixes both issues, the PR is no longer required

Should I close this since nix.sandboxPaths solves the issue? The initial reason was running a multi-node cluster integration test, in which the application was dependent on nsswitch.conf to lookup localhost properly so the nodes would trust each other.

Adding /etc/protocols would be a fairly substantial impurity.

see #1238

I marked this as stale due to inactivity. → More info

I closed this issue due to inactivity. → More info