From 02808df5fb012ff291d9d9fbf047502c0fd0c552 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Wed, 5 Feb 2025 21:45:37 +0100
Subject: [PATCH] remove rw access to bun cache in nsjail mode

---
 backend/windmill-worker/nsjail/run.bun.config.proto | 8 --------
 backend/windmill-worker/src/bun_executor.rs         | 1 -
 2 files changed, 9 deletions(-)

diff --git a/backend/windmill-worker/nsjail/run.bun.config.proto b/backend/windmill-worker/nsjail/run.bun.config.proto
index 751452251d..527d49cf7a 100644
--- a/backend/windmill-worker/nsjail/run.bun.config.proto
+++ b/backend/windmill-worker/nsjail/run.bun.config.proto
@@ -156,14 +156,6 @@ mount {
 
 iface_no_lo: true
 
-mount {
-    src: "{CACHE_DIR}"
-    dst: "/tmp/windmill/cache_nomount/bun"
-    is_bind: true
-    mandatory: false
-    rw: true
-}
-
 {SHARED_MOUNT}
 
 envar: "HOME=/tmp/{LANG}"
diff --git a/backend/windmill-worker/src/bun_executor.rs b/backend/windmill-worker/src/bun_executor.rs
index 9e4d7669cf..52c5ba7491 100644
--- a/backend/windmill-worker/src/bun_executor.rs
+++ b/backend/windmill-worker/src/bun_executor.rs
@@ -1360,7 +1360,6 @@ try {{
             &NSJAIL_CONFIG_RUN_BUN_CONTENT
                 .replace("{LANG}", if annotation.nodejs { "nodejs" } else { "bun" })
                 .replace("{JOB_DIR}", job_dir)
-                .replace("{CACHE_DIR}", BUN_CACHE_DIR)
                 .replace("{CLONE_NEWUSER}", &(!*DISABLE_NUSER).to_string())
                 .replace(
                     "{SHARED_MOUNT}",