me
/
guix
Archived
1
0
Fork 0
Code

doc: Correct the "guix shell --container" example. 

* doc/guix.texi (Invoking @command{guix shell}): Add missing parameters
to preserve and expose $XAUTHORITY.  Adjust corresponding textual description.

Change-Id: Ib99c81c107ff9784708ae807ec9b3ab93ad75603
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
master
Rostislav Svoboda 2024-04-02 18:54:06 +02:00 committed by Liliana Marie Prikler
parent e14bc39a97
commit 0f68306268
No known key found for this signature in database
GPG Key ID: 442A84B8C70E2F87
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/guix.texi
View File

@ -5983,12 +5983,18 @@ such as @file{/usr/bin} on foreign distros.
This @option{--container} option can also prove useful if you wish to
run a security-sensitive application, such as a web browser, in an
isolated environment. For example, the command below launches
Ungoogled-Chromium in an isolated environment, this time sharing network
access with the host and preserving its @code{DISPLAY} environment
variable, but without even sharing the current directory:
Ungoogled-Chromium in an isolated environment, which:
@itemize
@item shares network access with the host
@item inherits host's environment variables @code{DISPLAY} and @code{XAUTHORITY}
@item has access to host's authentication records from the @code{XAUTHORITY}
file
@item has no information about host's current directory
@end itemize
@example
guix shell --container --network --no-cwd ungoogled-chromium \
--preserve='^XAUTHORITY$' --expose="$@{XAUTHORITY@}" \
--preserve='^DISPLAY$' -- chromium
@end example