diff --git a/isolated-protonmail-bridge.sh b/isolated-protonmail-bridge.sh index 5e8a997..e20b002 100755 --- a/isolated-protonmail-bridge.sh +++ b/isolated-protonmail-bridge.sh @@ -5,20 +5,19 @@ HERE="$(dirname "$(readlink -f "${BASH_SOURCE[0]}")")" JAIL_HOME=/home/proton BIN="${BIN:-entrypoint.sh}" -if [[ -z "${ROOTFS:-}" ]]; then - echo "Please set the ROOTFS envvar!" +if [[ -z "${BRIDGE_HOME:-}" ]]; then + echo "Please set the BRIDGE_HOME envvar!" exit 1 else - ROOTFS="$(realpath "${ROOTFS}")" + BRIDGE_HOME="$(realpath "${BRIDGE_HOME}")" fi -rm -rf "${ROOTFS}/dev/fd" - nsjail -Mo \ --disable_clone_newnet \ - --chroot "${ROOTFS}" --rw \ --cwd "${JAIL_HOME}" \ + --tmpfsmount / \ --tmpfsmount /tmp --tmpfsmount /run \ + --bindmount "${BRIDGE_HOME}:${JAIL_HOME}" \ --symlink /proc/self/fd:/dev/fd \ --bindmount_ro "${HERE}/entrypoint.sh:${JAIL_HOME}/entrypoint.sh" \ --bindmount_ro "${HERE}/gpg-keygen-params.txt:${JAIL_HOME}/gpg-keygen-params.txt" \