nix: mount /tmp/zig-cache RW in sandbox actions (#60018)

Non-hermetic /tmp disabled until we're on bazel 7.0.1
https://github.com/bazelbuild/bazel/issues/20527

## Test plan

`bazel build //:gazelle-buf`
This commit is contained in:
Noah S-C 2024-01-31 16:38:58 +00:00 committed by GitHub
parent dd34d1be07
commit 07c493fd9d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -45,4 +45,6 @@ build --action_env=PGDATABASE
build --action_env=PGDATASOURCE
build --action_env=PGUSER
build --sandbox_add_mount_pair=/tmp/zig-cache
build --sandbox_writable_path=/tmp/zig-cache
build --noincompatible_sandbox_hermetic_tmp
EOF