app_containers: Disable /dev/shm mount

We have disabled the MIT-SHM extension entirely.

app_containers/.local/bin/run_app_container

@@ -48,9 +48,7 @@ SUDO_ASKPASS=$HOME/.local/bin/askpass-bemenu sudo -A systemd-nspawn -M $CONTAINE
     --bind-ro=/run/systemd/resolve/stub-resolv.conf:/etc/resolv.conf \
     `# GPU` \
     --bind=/dev/dri \
-    --bind=/dev/shm \
-    --property=DeviceAllow='/dev/dri rw' \
-    --property=DeviceAllow='/dev/shm rw' \
+    --property=DeviceAllow='char-drm rw' \
     `# Input devices` \
     --bind-ro=/dev/input \
     --property=DeviceAllow='char-input r' \
@@ -58,7 +56,7 @@ SUDO_ASKPASS=$HOME/.local/bin/askpass-bemenu sudo -A systemd-nspawn -M $CONTAINE
     --bind=$container_xdg_runtime:/run/xdg \
     --setenv=XDG_RUNTIME_DIR=/run/xdg \
     `# Xorg / Xwayland` \
-    --bind-ro=/tmp/.X11-unix \
+    --bind=/tmp/.X11-unix \
     --setenv=DISPLAY=$DISPLAY \
     `# Wayland (note the symlink created before in xdg runtime)` \
     --bind-ro=$XDG_RUNTIME_DIR/$WAYLAND_DISPLAY:/run/host/$WAYLAND_DISPLAY \

bash/.bashrc

@@ -122,4 +122,5 @@ export GTK_THEME=Gruvbox-Material-Dark-HIDPI
 export GTK_IM_MODULE=fcitx
 export QT_IM_MODULE=fcitx
 export SDL_IM_MODULE=fcitx
+export WLR_XWAYLAND=$HOME/.local/bin/Xwayland-noshm
 $MACHINE_START_SWAY && [[ -z "$DISPLAY" && $(tty) == /dev/tty1 ]] && exec sway

sway/.local/bin/Xwayland-noshm

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+exec /usr/bin/Xwayland -extension MIT-SHM $@