alexion/dev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(nix): explain guest secret mounts

Browse Source
This commit is contained in:
alexion
2026-10-20 04:38:58 -04:00
parent 98d6c3227c
commit b25e7106d6
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/skills/style/nix/rules/dotfiles.md
View File

@@ -39,5 +39,5 @@ Each guest service group accesses its secrets through a read-only bind mount.
### Rationale ### Rationale
SOPS applies secret ownership on the host before the guest starts. SOPS materializes secrets on the host filesystem.
Read-only bind mounts give guest service groups access without write access. Read-only bind mounts prevent guest services from modifying the host copy.