I try to use firejail on nixos when I can’t do something in the build sandbox.
It’s painful, and I’m always on the lookout for something better. I’d at least like a portal-ish system where I can easily add things to a sandbox while it’s running.
Edit: if anyone has any issues or discussions about this I’d like to contribute.


I think the beauty of Emacs is not that it gives you a text editor, but that it gives you a lisp environment.