From aff435a0fb3a56b1d7b738c7dede363440884b3a Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Thu, 17 Sep 2026 15:05:36 +0100
Subject: Add the Canonical laptop profile and setup workflows

---
 canonical/apparmor/dotfiles-nix | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 canonical/apparmor/dotfiles-nix

(limited to 'canonical/apparmor/dotfiles-nix')

diff --git a/canonical/apparmor/dotfiles-nix b/canonical/apparmor/dotfiles-nix
new file mode 100644
index 0000000..b894210
--- /dev/null
+++ b/canonical/apparmor/dotfiles-nix
@@ -0,0 +1,10 @@
+abi <abi/4.0>,
+include <tunables/global>
+
+profile dotfiles-nix-bwrap /nix/store/*-bubblewrap-*/bin/bwrap flags=(unconfined) {
+  userns,
+}
+
+profile dotfiles-nix-podman /nix/store/*-podman-*/bin/{podman,.podman-wrapped} flags=(unconfined) {
+  userns,
+}
-- 
cgit v1.3.1