mirror of
https://github.com/storytold/gridcraft.git
synced 2026-10-28 12:46:48 -06:00
Grant network access so update checks can reach GitHub (#2841)
This commit is contained in:
@@ -22,6 +22,8 @@ finish-args:
|
||||
- --socket=fallback-x11
|
||||
# X11 shared memory (MIT-SHM). Without it the X11 fallback is slow or fails.
|
||||
- --share=ipc
|
||||
# Network access for update checks against GitHub.
|
||||
- --share=network
|
||||
# GPU access for rendering.
|
||||
- --device=dri
|
||||
# Open/Save dialogs use the file-chooser portal (rfd), and drag-and-drop uses the document
|
||||
@@ -29,9 +31,7 @@ finish-args:
|
||||
# opening workbooks by path from the command line.
|
||||
- --filesystem=xdg-documents
|
||||
- --filesystem=xdg-download
|
||||
# Deliberately not granted: network (the optional --control channel listens on 127.0.0.1 in
|
||||
# the sandbox; `flatpak override --user --share=network ai.storyteller.gridcraft` exposes it to
|
||||
# host agents) and home/host filesystem access.
|
||||
# Network: update checks reach GitHub. Home/host filesystem access is deliberately not granted.
|
||||
modules:
|
||||
- name: gridcraft
|
||||
buildsystem: simple
|
||||
|
||||
@@ -23,6 +23,8 @@ finish-args:
|
||||
- --socket=fallback-x11
|
||||
# X11 shared memory (MIT-SHM). Without it the X11 fallback is slow or fails.
|
||||
- --share=ipc
|
||||
# Network access for update checks against GitHub.
|
||||
- --share=network
|
||||
# GPU access for rendering.
|
||||
- --device=dri
|
||||
# Open/Save dialogs use the file-chooser portal (rfd), and drag-and-drop uses the document
|
||||
@@ -30,9 +32,7 @@ finish-args:
|
||||
# opening workbooks by path from the command line.
|
||||
- --filesystem=xdg-documents
|
||||
- --filesystem=xdg-download
|
||||
# Deliberately not granted: network (the optional --control channel listens on 127.0.0.1 in
|
||||
# the sandbox; `flatpak override --user --share=network ai.storyteller.gridcraft` exposes it to
|
||||
# host agents) and home/host filesystem access.
|
||||
# Network: update checks reach GitHub. Home/host filesystem access is deliberately not granted.
|
||||
build-options:
|
||||
append-path: /usr/lib/sdk/rust-stable/bin
|
||||
modules:
|
||||
|
||||
Reference in New Issue
Block a user