Update deps

flake.lock

@@ -2,11 +2,11 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1687523113,
+        "lastModified": 1720893482,
-        "narHash": "sha256-dQhdLPyLanyyNbzE9BmV/+792IEkPGrEOi/RC2GRLXs=",
+        "narHash": "sha256-fGQczQ3JuvqSK3rYsJvvbE7j8BENLp8DqJH1B0uXYKg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "2c59f96089a1a4c5c8aaee1e9095f662204a753c",
+        "rev": "94c843e8f05bac70e905c48c965ba7be79bde613",
         "type": "github"
       },
       "original": {

flake.nix

@@ -6,7 +6,7 @@
   outputs = { self, nixpkgs }: {
     packages.x86_64-linux.default =
       with import nixpkgs { system = "x86_64-linux"; };
-      nimPackages.buildNimPackage {
+      buildNimPackage {
         name = "bwbox";
         src = self;
         nativeBuildInputs = [pkgs.makeWrapper];

lib/sandbox.nim

@@ -1,4 +1,5 @@
 import strutils
+import sequtils
 import options
 import config
 import utils
@@ -36,6 +37,7 @@ proc sandboxExec*(args: Args) =
   config.extendConfig()
 
   call
+    .addArg("--new-session")
     .addArg("--dev", "/dev")
     .addMount("--dev-bind", "/dev/random")
     .addMount("--dev-bind", "/dev/urandom")
@@ -73,4 +75,7 @@ proc sandboxExec*(args: Args) =
   var cmd = args.getCmd
   cmd[0] = findExe(cmd[0])
 
+  echo call.args.join("  ")
+  echo cmd
+
   call.addArg(cmd).exec()