colbyt <colby@colbyt.com> writes:

> make-vm copies the closure of the run path into the image.
>
> For app VMs that use lib.getExe, that can miss files from the package
> output that owns the executable. Allow callers to pass explicit closure
> roots, and use the package derivations for the foot and Firefox app VMs.
>
> Signed-off-by: colbyt <colby@colbyt.com>

Can you give an example of something it misses?  If a store path depends
on paths not in its closure, that's likely a packaging bug (outside of
specific exceptions like /run/opengl-driver).