bind mount /etc/ld.so.cache to the sandbox

without /etc/ld.so.cache available in the sandbox, tests fail on gentoo with: /usr/bin/ffmpeg: error while loading shared libraries: libstdc++.so.6: cannot open shared object file: No such file or directory

build-fail.log build-fixed.log

see https://gitlab.gnome.org/GNOME/gnome-desktop/commit/f4dcb2f2a9f0593ca8f8da6acfe553eaf7600aea for a more in depth explanation.

libmat2/subprocess.py

@@ -47,6 +47,7 @@ def _get_bwrap_args(tempdir: str,
          '--chdir', cwd,
          '--unshare-all',
          '--new-session',
+         '--ro-bind', '/etc/ld.so.cache', '/etc/ld.so.cache',
          # XXX: enable --die-with-parent once all supported platforms have
          # a bubblewrap recent enough to support it.
          # '--die-with-parent',