Nekoray tun mode not work

Help
1

I realized that it was incorrect, and I tried to connect to the Internet, but nothing worked for me because I couldn’t turn on the Tun mode due to the fact that the nix/store is immutable and incorrect, I couldn’t redirect to nekobox_core - The root server could not be started:root /nix/store/a01f6kp8pzqmnbqalwgnmryal7vr1c93-nekobox-core-4.3.4 the /bin/nekobox_core code is 256 Failed to launch chmod u+s /nix/store/a01f6kp8pzqmnbqalwgnmryal7vr1c93-nekobox-core-4.3.4/bin/nekobox_core.
If anyone has encountered this, please help

2

Can you explain what you’re trying to do rather than just tell us what’s not working?

If you’re trying to setuid a binary, you need security.wrappers, or more likely some kind of NixOS module. Share your configuration while you’re at it.

3 
  imports = [
    #./syncthing.nix
  # <home-manager/nixos>
    ./hardware-configuration.nix
  ];
  security.polkit.enable = true;
  programs.sway.enable = true;
  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };

security.wrappers.nekobox_core = {
  enable = true;
  source = "${pkgs.nekoray.nekobox-core}/bin/nekobox_core";
  program = "nekobox_core";
  owner = "zerok";   # твой пользователь
  group = "users";
  capabilities = "cap_net_admin+ep";
};
  nix = {
    package = pkgs.nix;
    settings.experimental-features = [ "nix-command" "flakes" ];
  }; 
  nixpkgs.config.allowUnfree = true;
  environment.shells = with pkgs; [ fish ];
  users.defaultUserShell = pkgs.fish;
  environment.variables.EDITOR = "nvim";
  networking = {
    # nameservers = [ "83.220.169.155" "212.109.195.93" ];
    hostName = "nixos";
    networkmanager.enable = true;
  };
  services.syncthing = let

    user = "zerok";
    pathToCertKey = "/etc/nixos/certs";

  in {
    user = user;
    group = "users";
    enable = true;
    cert = "${builtins.toString pathToCertKey}/cert.pem";
    key = "${builtins.toString pathToCertKey}/key.pem";
  
    settings = {
      gui = {
        inherit user;
        password = "R$74!78z^t29*!8vF^*Xn43&$";
      };
      devices = {
        # "My Phone" = {
        #   id =
        #     "NC2PQPF-VHC7PKH-CLYO3R5-A6AK6HN-RDIFQF5-GUD76E2-PMC6WFK-LIYV5AR";
        # };
        "My Notebook" = {
          id =
            "OGWESCT-BPUJPPP-HPH2O7I-7ZQFIUI-Y2GLVQE-B4K6G4F-TIYCUWM-ZDJKRA7";
        };
      };
      folders = {
        "Obsidian" = {
          path = "/home/zerok/Documents/obsidian/";
          devices = [ "My Notebook" ];
        };
      };
    };
    openDefaultPorts = true;

  };

  time.timeZone = "Europe/Moscow";
  i18n = {
    defaultLocale = "en_US.UTF-8";
    extraLocaleSettings = {
      LC_ADDRESS = "ru_RU.UTF-8";
      LC_IDENTIFICATION = "ru_RU.UTF-8";
      LC_MEASUREMENT = "ru_RU.UTF-8";
      LC_MONETARY = "ru_RU.UTF-8";
      LC_NAME = "ru_RU.UTF-8";
      LC_NUMERIC = "ru_RU.UTF-8";
      LC_PAPER = "ru_RU.UTF-8";
      LC_TELEPHONE = "ru_RU.UTF-8";
      LC_TIME = "ru_RU.UTF-8";
    };
  };

  users.users.zerok = {
    isNormalUser = true;
    description = "zerok";
    extraGroups = [ "networkmanager" "wheel" "video" "input" "audio"  ];
  };

  users.users.nixosvmtest = {
    extraGroups = [ "wheel" ];
    isSystemUser = false;
    isNormalUser = true;
    initialPassword = "1";
    group = "nixosvmtest";
  };

  users.groups.nixosvmtest = { };

  virtualisation.vmVariant.virtualisation = {
    memorySize = 2048;
    cores = 3;
  };

  services.xserver = {
    videoDrivers = [ "amdgpu" "radeon" ];
    xkb = {
      layout = "us,ru";
      options = "grp:win_space_toggle,caps:escape";
    };
  };
  programs = {
    hyprlock.enable = true;
    nix-ld.enable = true;
    fish.enable = true;
    direnv.enable = true;
    steam = {
      enable = true;
      gamescopeSession = {
        enable = true;
        args = [ "-O" "DP-1" ];
      };
    };
    gamescope = {
      enable = true;

    };
  };

  services = {

    displayManager.ly.enable = true;
    hypridle.enable = true;
    playerctld.enable = true;
    mpd.fluidsynth = true;
    flatpak.enable = true;
  };

  hardware.bluetooth = {
    enable = true;
    powerOnBoot = true;
  };
systemd.user.services.polkit-gnome-authentication-agent-1 = {
  description = "polkit-gnome-authentication-agent-1";
  wantedBy = [ "graphical-session.target" ];
  wants = [ "graphical-session.target" ];
  after = [ "graphical-session.target" ];
  serviceConfig = {
    Type = "simple";
    ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
    Restart = "on-failure";
    RestartSec = 1;
    TimeoutStopSec = 10;
  };
};
  fonts.packages = with pkgs; [
    maple-mono.CN
    maple-mono."CN-unhinted"
    maple-mono.NF
    maple-mono."NF-CN"
  ];

  system.stateVersion = "25.05";
}

Here is the package on nixpkg - NixOS Search