From a438391d7077b5cff95a29e299536be9e4a2fbb4 Mon Sep 17 00:00:00 2001
From: Chris Wanstrath <chris@ozmm.org>
Date: Wed, 18 Feb 2026 16:01:21 -0800
Subject: [PATCH] Restrict VM mount to ~/dev instead of entire home directory

---
 src/vm.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/vm.ts b/src/vm.ts
index c781c5a..224ed64 100644
--- a/src/vm.ts
+++ b/src/vm.ts
@@ -15,7 +15,7 @@ export async function ensure(): Promise<void> {
 
   // Create from scratch
   const home = homedir()
-  await $`limactl create --name=${VM_NAME} --mount=${home}:w --mount-writable template:ubuntu-24.04`.quiet()
+  await $`limactl create --name=${VM_NAME} --mount=${home}/dev:w template:ubuntu-24.04`.quiet()
   await $`limactl start ${VM_NAME}`.quiet()
 
   // Provision