generation 561 25.11.20250714.62e0f05

home/scripts/tex/safe-tex.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# designed to compile tex with isolation, in the case something like minted is used
+set -euo pipefail
+
+if [[ $# -lt 1 ]]; then
+  echo "Usage: $0 <texfile> [tectonic args...]"
+  exit 1
+fi
+
+TEXFILE="$1"
+shift
+
+mkdir -p ~/.cache/Tectonic
+
+nix-shell -p bubblewrap tectonic cacert python313Packages.pygments which --run "
+  bwrap --ro-bind /nix /nix \
+        --bind \$(pwd) /workspace \
+        --bind ~/.cache/Tectonic ~/.cache/Tectonic \
+        --chdir /workspace \
+        --dev /dev \
+        --proc /proc \
+        --tmpfs /tmp \
+        --symlink \$(which bash) /bin/sh \
+        --ro-bind /etc/resolv.conf /etc/resolv.conf \
+        --ro-bind /etc/hosts /etc/hosts \
+        --ro-bind /etc/nsswitch.conf /etc/nsswitch.conf \
+        --setenv SSL_CERT_FILE \"\$SSL_CERT_FILE\" \
+        --setenv TMPDIR /tmp \
+        --setenv PATH \"\$PATH\" \
+        tectonic -Z shell-escape '$TEXFILE' --keep-intermediates $*
+"