Options

boot.binfmt.addEmulatedSystemsToNixSandbox

Whether to add the {option}`boot.binfmt.emulatedSystems` to {option}`nix.settings.extra-platforms`. Disable this to use remote builders for those platforms, while allowing testing binaries locally.

boot.binfmt.emulatedSystems

List of systems to emulate. Will also configure Nix to support your new systems. Warning: the builder can execute all emulated systems within the same build, which introduces impurities in the case of cross compilation.

boot.binfmt.preferStaticEmulators

Whether to use static emulators when available. This enables the kernel to preload the emulator binaries when the binfmt registrations are added, obviating the need to make the emulator binaries available inside chroots and chroot-like sandboxes.

boot.binfmt.registrations

Extra binary formats to register with the kernel. See <https://www.kernel.org/doc/html/latest/admin-guide/binfmt-misc.html> for more details.

boot.binfmt.registrations.<name>.fixBinary

Whether to open the interpreter file as soon as the registration is loaded, rather than waiting for a relevant file to be invoked. See the description of the 'F' flag in the kernel docs for more details.

boot.binfmt.registrations.<name>.interpreter

The interpreter to invoke to run the program. Note that the actual registration will point to /run/binfmt/${name}, so the kernel interpreter length limit doesn't apply.

boot.binfmt.registrations.<name>.magicOrExtension

The magic number or extension to match on.

boot.binfmt.registrations.<name>.mask

A mask to be ANDed with the byte sequence of the file before matching

boot.binfmt.registrations.<name>.matchCredentials

Whether to launch with the credentials and security token of the binary, not the interpreter (e.g. setuid bit). See the description of the 'C' flag in the kernel docs for more details. Implies/requires openBinary = true.

boot.binfmt.registrations.<name>.offset

The byte offset of the magic number used for recognition.

boot.binfmt.registrations.<name>.openBinary

Whether to pass the binary to the interpreter as an open file descriptor, instead of a path.

boot.binfmt.registrations.<name>.preserveArgvZero

Whether to pass the original argv[0] to the interpreter. See the description of the 'P' flag in the kernel docs for more details;

boot.binfmt.registrations.<name>.recognitionType

Whether to recognize executables by magic number or extension.

boot.binfmt.registrations.<name>.wrapInterpreterInShell

Whether to wrap the interpreter in a shell script. This allows a shell command to be set as the interpreter.

Options - 14