lib/mkSandboxSystem: print network restriction status

1 files changed, 12 insertions, 1 deletions

diff --git a/lib/mk-sandbox-system.nix b/lib/mk-sandbox-system.nix
index e9866cf..3bbc488 100644
--- a/lib/mk-sandbox-system.nix
+++ b/lib/mk-sandbox-system.nix
@@ -39,6 +39,17 @@ let
       ${shellLib.fmt.printSectionTitle "FORWARDED PORTS (host <-> guest)"}
       ${pkgs.lib.concatMapStringsSep "\n" printForwardedPort portForwards}
     '';
+
+    printNetworkRestricted = isRestricted:
+      if isRestricted then "Restricted" else "Unrestricted";
+    printNetworkAllowed = isRestricted:
+      if isRestricted then "disallowed" else "allowed";
+    printRestrictedNetwork = isRestricted: ''
+      ${shellLib.fmt.printSectionTitle "NETWORK ACCESS"}
+      echo -en ${shellLib.fmt.keyword (printNetworkRestricted isRestricted)}
+      echo -n ': local network and internet access '
+      echo ${printNetworkAllowed isRestricted}.
+    '';
   };
 
 in rec {
@@ -84,11 +95,11 @@ in rec {
       interactiveShellInit = lib.mkBefore ''
         ${shellLib.ifSomeAttrs envVars shellLib.printEnvVars}
         ${shellLib.ifSomeList tools shellLib.printBins}
-
         ${shellLib.ifSomeAttrs config.virtualisation.sharedDirectories
           print.printSharedDirs}
         ${shellLib.ifSomeList config.virtualisation.forwardPorts
           print.printForwardedPorts}
+        ${print.printRestrictedNetwork restrictNetwork}
       '';
     };