From 91545959105dc94f745d183e76b79ee9ed15eb0d Mon Sep 17 00:00:00 2001
From: Zuckerberg <zuckerberg@neet.dev>
Date: Tue, 17 Feb 2026 21:35:23 -0800
Subject: [PATCH] Ad Incus sandbox on fry I've already been using for a while
 now

---
 machines/fry/default.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/machines/fry/default.nix b/machines/fry/default.nix
index 99435c2..2b10b87 100644
--- a/machines/fry/default.nix
+++ b/machines/fry/default.nix
@@ -13,6 +13,18 @@
   # Upstream interface for sandbox networking (NAT)
   networking.sandbox.upstreamInterface = lib.mkDefault "enp191s0";
 
+  # Enable sandboxed workspace
+  sandboxed-workspace = {
+    enable = true;
+    workspaces.test-incus = {
+      type = "incus";
+      autoStart = true;
+      config = ./workspaces/test-container.nix;
+      ip = "192.168.83.90";
+      hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL0SNSy/MdW38NqKzLr1SG8WKrs8XkrqibacaJtJPzgW";
+    };
+  };
+
   environment.systemPackages = with pkgs; [
     system76-keyboard-configurator
   ];