scripts/bcodex at master · tomhense/scripts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
#!/usr/bin/sh

exec /usr/bin/bwrap \
	--tmpfs /tmp \
	--dev /dev \
	--proc /proc \
	--hostname bubblewrap --unshare-uts \
	--ro-bind /bin /bin \
	--ro-bind /lib /lib \
	--ro-bind /lib64 /lib64 \
	--ro-bind /usr/bin /usr/bin \
	--ro-bind /usr/lib /usr/lib \
	--ro-bind /usr/local/bin /usr/local/bin \
	--ro-bind /usr/local/lib /usr/local/lib \
	--ro-bind /etc/resolv.conf /etc/resolv.conf \
	--ro-bind /etc/profile.d /etc/profile.d \
	--ro-bind /etc/bash_completion.d /etc/bash_completion.d \
	--ro-bind /etc/ssl/certs /etc/ssl/certs \
	--ro-bind /etc/ca-certificates /etc/ca-certificates \
	--ro-bind /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt \
	--ro-bind /etc/ld.so.cache /etc/ld.so.cache \
	--ro-bind /etc/ld.so.conf /etc/ld.so.conf \
	--ro-bind /etc/ld.so.conf.d /etc/ld.so.conf.d \
	--ro-bind /etc/localtime /etc/localtime \
	--ro-bind /usr/share/terminfo /usr/share/terminfo \
	--ro-bind /usr/share/ca-certificates /usr/share/ca-certificates \
	--ro-bind /etc/nsswitch.conf /etc/nsswitch.conf \
	--ro-bind /etc/hosts /etc/hosts \
	--ro-bind /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf \
	--ro-bind /usr/share/zoneinfo /usr/share/zoneinfo \
	--ro-bind /etc/java-openjdk /etc/java-openjdk \
	--bind $HOME/.local/share/gradle $HOME/.local/share/gradle \
	--ro-bind $HOME/.bashrc $HOME/.bashrc \
	--ro-bind $HOME/.zshrc $HOME/.zshrc \
	--ro-bind $HOME/.config/zsh $HOME/.config/zsh \
	--ro-bind $HOME/.aliases $HOME/.aliases \
	--ro-bind $HOME/.gitconfig $HOME/.gitconfig \
	--bind $HOME/.config/codex/ $HOME/.config/codex \
	--ro-bind $HOME/.config/codex/config.toml $HOME/.config/codex/config.toml \
	--bind $HOME/.cache $HOME/.cache \
	--bind "$PWD" "$PWD" \
	/usr/bin/env codex --sandbox workspace-write $@