Tell bubblewrap to share the store.  Required for programs that use the
sandboxing features such as Epiphany.

See <https://bugs.gnu.org/40837>.
Author: Jack Hill <jackhill@jackhill.us>
---
diff --git a/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp b/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp
--- a/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp
+++ b/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp
@@ -737,6 +737,9 @@ GRefPtr<GSubprocess> bubblewrapSpawn(GSubprocessLauncher* launcher, const Proces
         "--ro-bind-try", "/usr/local/share", "/usr/local/share",
         "--ro-bind-try", DATADIR, DATADIR,
 
+       // Bind mount the store inside the WebKitGTK sandbox.
+       "--ro-bind", "@storedir@", "@storedir@",
+
         // We only grant access to the libdirs webkit is built with and
         // guess system libdirs. This will always have some edge cases.
         "--ro-bind-try", "/lib", "/lib",
b right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>refs</a><a class='active' href='/guix/log/gnu/build/bootloader.scm'>log</a><a href='/guix/tree/gnu/build/bootloader.scm?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>tree</a><a href='/guix/commit/gnu/build/bootloader.scm?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>commit</a><a href='/guix/diff/gnu/build/bootloader.scm?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/build/bootloader.scm'>
<input type='hidden' name='id' value='9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>root</a>/<a href='/guix/log/gnu?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>gnu</a>/<a href='/guix/log/gnu/build?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>build</a>/<a href='/guix/log/gnu/build/bootloader.scm?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed'>bootloader.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/bootloader.scm?id=9e3a5ee417ea7fe9721be8804ff047e80c4f22ed&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-05-05 16:08:33 +0200'>2020-05-05</span></td><td><a href='/guix/commit/gnu/build/bootloader.scm?id=f8fd1157174fd523d36dcfa756c965a54c30d5ae'>build: bootloader: Add install-efi procedure.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/bootloader.scm (install-efi): New procedure copied from (gnu build vm).
(install-efi-loader): New exported procedure, wrapping install-efi.
* gnu/build/vm.scm (initialize-hard-disk): Adapt to use install-efi-loader.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2019-06-17 16:13:36 +0200'>2019-06-17</span></td><td><a href='/guix/commit/gnu/build/bootloader.scm?id=45d46223f92b0933aaf9b1392a21d09eaa1e2881'>utils: Add 'invoke/quiet'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/bootloader.scm (G_): Remove.
(open-pipe-with-stderr, invoke/quiet): Move to...
* guix/build/utils.scm: ... here.  Use 'let-values' instead of
'define-values' because Guile 2.0 (the bootstrap Guile) doesn't know
about 'define-values'.
* po/guix/POTFILES.in: Remove gnu/build/bootloader.scm, and add
guix/build/utils.scm.
* tests/build-utils.scm: Remove import of (gnu build bootloader).
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-03-16 18:15:13 +0100'>2019-03-16</span></td><td><a href='/guix/commit/gnu/build/bootloader.scm?id=f0cc5e7e1e4c03af29c5d4855dc5962502c49147'>booloader: Add 'invoke/quiet'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/bootloader.scm (G_): New macro.
(open-pipe-with-stderr, invoke/quiet): New procedures.
* tests/build-utils.scm ("invoke/quiet, success")
("invoke/quiet, failure")
("invoke/quiet, failure, message on stderr"): New tests.
* po/guix/POTFILES.in: Add bootloader.scm.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-12-15 11:52:38 +0100'>2017-12-15</span></td><td><a href='/guix/commit/gnu/build/bootloader.scm?id=e22482038611a53a9d2b25df20363664cd91be2e'>bootloader: Factorize write-file-on-device.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/bootloader/extlinux.scm (install-extlinux): Factorize bootloader
writing in a new procedure write-file-on-device defined in (gnu build
bootloader).
* gnu/build/bootloader.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add new file.
* gnu/system/vm.scm (qemu-img): Adapt to import and use (gnu build bootloader)
module during derivation building.
* gnu/scripts/system.scm (bootloader-installer-derivation): Ditto.
</span></span></td><td>Mathieu Othacehe</td></tr>