From 5be95f0b889fc9135bc3d1181970ee83ca74fe5e Mon Sep 17 00:00:00 2001
From: Malte Poll <1780588+malt3@users.noreply.github.com>
Date: Fri, 22 Dec 2023 13:06:11 +0100
Subject: [PATCH] bubblewrap: add /etc/static symlink

On NixOS, ssl certificates are stored as follows:

/etc/ssl/certs/ca-bundle.crt -> /etc/static/ssl/certs/ca-bundle.crt
/etc/static -> /nix/store/<HASH>-etc/etc

Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
---
 mkosi/bubblewrap.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/mkosi/bubblewrap.py b/mkosi/bubblewrap.py
index 7c1550bca..853b4232e 100644
--- a/mkosi/bubblewrap.py
+++ b/mkosi/bubblewrap.py
@@ -105,6 +105,9 @@ def bwrap(
         if p.is_symlink():
             cmdline += ["--symlink", p.readlink(), p]
 
+    if Path("/etc/static").is_symlink():
+        cmdline += ["--symlink", Path("/etc/static").readlink(), "/etc/static"]
+
     if network:
         cmdline += ["--bind", "/etc/resolv.conf", "/etc/resolv.conf"]
 
-- 
2.47.2