#!/usr/bin/env bash root=$(realpath result) readarray -t deps < <(nix-store -qR "$root") try() { declare -a binds for dep in "${deps[@]}" /etc/resolv.conf /etc/ssl/certs/ca-certificates.crt; do binds+=("--ro-bind" "$dep" "$dep") done bwrap ${binds[*]} "$root" } mod=1 while [[ "$mod" == 1 ]]; do mod=0 for k in "${!deps[@]}"; do v=${deps[$k]} unset deps[$k] if try 2>/dev/null >/dev/null; then echo "Successfully executed without dependency $v" >&2 mod=1 else echo "Couldn't run without dependency $v" >&2 deps[$k]=$v fi done done for v in "${deps[@]}"; do echo "$v" done