quixos-toolchain/quixos-nix-helpers
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Keep checked browser runtime versions independent of authority upgrades

Browse Source
This commit is contained in:
Timothy J. Aveni
2026-10-07 17:03:01 -07:00
parent d6e66b537f
commit dbd159be70
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
restricted-execution/workerd.nix
+3 -2
View File
@@ -1,5 +1,6 @@
# Pinned upstream engine. This binary supplies an import/capability boundary; # Pinned upstream engine. This binary supplies an import/capability boundary;
# production execution additionally requires a workspace VM and OS limits. # production execution additionally requires OS limits and platform approval
# for shared placement, or a workspace VM for unreviewed application code.
{ pkgs }: { pkgs }:
let let
version = "1.20261005.1"; version = "1.20261005.1";
@@ -37,7 +38,7 @@ pkgs.stdenvNoCC.mkDerivation {
"$out/bin/workerd" --version | grep -Fx 'workerd 2026-10-05' "$out/bin/workerd" --version | grep -Fx 'workerd 2026-10-05'
''; '';
meta = { meta = {
description = "Pinned workerd engine for VM-scoped Quixos restricted execution"; description = "Pinned workerd engine for Quixos restricted execution";
homepage = "https://github.com/cloudflare/workerd"; homepage = "https://github.com/cloudflare/workerd";
license = pkgs.lib.licenses.asl20; license = pkgs.lib.licenses.asl20;
platforms = builtins.attrNames platforms; platforms = builtins.attrNames platforms;