Commit 48fc019

@@ -44,7 +44,7 @@
     bubblewrap = {
       sockets = {
         wayland = lib.mkDefault true;
-        pulse = true;
+        pipewire = true;
       };
 
       bind.rw = [
@@ -53,13 +53,20 @@
         (sloth.concat' sloth.xdgCacheHome "/mesa_shader_cache_db")
         (sloth.concat' sloth.xdgCacheHome "/radv_builtin_shaders")
 
-        (sloth.concat' sloth.runtimeDir "/at-spi/bus")
         (sloth.concat' sloth.runtimeDir "/gvfsd")
+
+        (sloth.concat' sloth.runtimeDir "/pulse")
       ];
       bind.ro = [
+        (sloth.concat' sloth.runtimeDir "/at-spi/bus")
+        "/run/dbus"
+
         "/etc/fonts"
+
         # Without /etc/egl, libEGL warns: failed to create dri2 screen
         "/etc/egl"
+        "/etc/static/egl"
+
         # Cursor and icon themes come from the host, so the session's
         # XCURSOR_PATH resolves instead of the app keeping its own copy.
         (sloth.concat' sloth.xdgDataHome "/icons")
@@ -74,14 +81,17 @@
       bind.dev =
         (map (id: "/dev/video${toString id}") (lib.lists.range 0 9))
         ++ [
+          "/dev/shm" # Shared Memory
+
           "/dev/nvidia0"
           "/dev/nvidiactl"
           "/dev/nvidia-modeset"
           "/dev/nvidia-uvm"
-        ]
-        # nixpak mounts the X11 sockets before its own tmpfs /tmp, which would
-        # hide them, and bind.dev is the only slot applied after that tmpfs.
-        ++ ["/tmp/.X11-unix"];
+
+          # nixpak mounts the X11 sockets before its own tmpfs /tmp, which would
+          # hide them, and bind.dev is the only slot applied after that tmpfs.
+          "/tmp/.X11-unix"
+        ];
 
       env = {
         XDG_DATA_DIRS = lib.makeSearchPath "share" [