X-Git-Url: https://git.rmz.io/dotfiles.git/blobdiff_plain/3563b4e91344cedd35c1fbd2f1dceaa735cef96d..02b33a1260a825fae9f3b8d68229a328b58a28e7:/mkosi/kodi/mkosi.nspawn

diff --git a/mkosi/kodi/mkosi.nspawn b/mkosi/kodi/mkosi.nspawn
index f731920..c3b14ff 100644
--- a/mkosi/kodi/mkosi.nspawn
+++ b/mkosi/kodi/mkosi.nspawn
@@ -1,7 +1,8 @@
 [Exec]
 PrivateUsers=no
-Capability=all
-SystemCallFilter=@default @raw-io @system-service @known
+
+[Network]
+Bridge=br0
 
 [Files]
 # binds host kodi home folder into nspawn
@@ -17,7 +18,6 @@ Bind=/mnt/fook/torrents
 # device access
 Bind=/dev/tty0
 Bind=/dev/tty1
-BindReadOnly=/dev/bus/usb
 BindReadOnly=/dev/dri
 BindReadOnly=/dev/input
 BindReadOnly=/dev/uinput
@@ -25,7 +25,6 @@ BindReadOnly=/dev/uinput
 BindReadOnly=/run/udev
 BindReadOnly=/dev/lirc0
 BindReadOnly=/dev/vga_arbiter
-BindReadOnly=/lib/modules
 # pulse need to be started in system mode with the following module and option:
 # load-module module-native-protocol auth-authorize-anonymous
 BindReadOnly=/run/pulse