From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 32F9CD04A; Thu, 02 Jul 2026 14:27:59 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id A9B65D02A; Thu, 02 Jul 2026 14:27:55 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_MISSING,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS autolearn=unavailable autolearn_force=no version=4.0.1 Received: from fout-b1-smtp.messagingengine.com (fout-b1-smtp.messagingengine.com [202.12.124.144]) by atuin.qyliss.net (Postfix) with ESMTPS id 5C48BD025 for ; Thu, 02 Jul 2026 14:27:54 +0000 (UTC) Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46]) by mailfout.stl.internal (Postfix) with ESMTP id 0EE7E1D00136; Thu, 2 Jul 2026 10:27:53 -0400 (EDT) Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-06.internal (MEProxy); Thu, 02 Jul 2026 10:27:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alyssa.is; h=cc :cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm1; t=1783002472; x=1783088872; bh=jfp4J0XHM5 68Q800ugG4GXNXpLeEo9+rybDapFkgB5M=; b=ZdaKObVY+OPSU7ugqWnOMd9x+g J+czG/sRKgyeJiIbjTIB42bURJALvq5MeHKU7rZqaEel/XlRq+RV0FBrWlrvkzFf iOtiep6nc6CC+R+/GcfIORUzAdxW31kYPyu24xozUVtsHQwigBL+dyzEazHguaJQ X0M4gFZyuzW0MGTOAt+3a/XLpWSZ94a6NGjQL9VHFILFRCDKxXuP2CLpOWwtpZu+ jSL5wFsCA9oeO5SEeAkvTaxn1ffMjhF7cNiFtqzD/QX/qVAbeaAdTqe8YxHefK72 TH+ASKpFVelyeekdpvKxsjXtnYuyNn1cWdNFt2/kISwsFWBfgZZdC3gsexag== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1783002472; x=1783088872; bh=jfp4J0XHM568Q800ugG4GXNXpLeEo9+rybD apFkgB5M=; b=i9yqJsLNZChoX89ZwBG/U+3gmcrS+c5lXoFjU5JkcGhFm7LtEvX gabmUu1t8bXuRs4p0jttXHWNv+iNGdu5JtXOGAmcngHtBItwvGQTqBq5Isyvk1Fz weosOjMKqiodXJdOGJsJtB+T+GimoZ4Q9k8RDvhsbql7U2KKoUZTYZTxsVhDT4WZ Bxe/zUmv0u4uCLyLKKSx26UdJjF4Lt3mUCZo8Ysx4rP2URTMmPoxjSHtOVHrs6DZ BBMPMzrDJVHXF0G/Wsdd7f4dD2DxDL/9JRUCVIh3UzM4kvK/kyp6dE4e3/lmI14M XAvBYEnZY8iIRoNpdoC5VY0piWg4XKebtCA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTFM873MuDtVz7GmQ18r1h9LaQcVL9thrSvK7BMA4fKfRqTE3pFj71BMYVAMHiEcTS ytLg3952Ty9SrOo8YiCpVyJQc1SBTlQRzR30ee9L5WHlyhF01h+fpCg5Hbnds3cCm2dBoR jEjCjS2VVkwRgnwsQkjL8mYP+cDQY/FVGZzl+4OcTWk54EOF4lAAplGTFvkw82t7W9lach d/fz6GhC4O+D1XbuZLOg77Khp+PQ59rp6wnFP1x0q8qXccKArhz2Nc/ekG4f+WHhfv5gEm vaeFNoCqsNqwzsu3zQ2UyRACEGeV8OerMEdD8HFlmug8+lJRYRr2+a2ft6zcxACEyl+nRk oUtiOy3dgDlpeXA4Y89renxPVMpyE9Jorm0y1j3ImqsxPUmiNOiCOmWc1xCMyAYIfWLdiY XPAxs3m7TcgKCfVYSpI3948V0dfDrRD05+zFMdl5ID7LvX8hX586NIJS3ZgC6+8//SgAfk grV1y8t2lYl/eQ8GpbkNOh7olMFrpDside1Tpp3VY26nDIpYnWJylFxkIwdhGkID3LXuV3 QHxbbfOiuuZ3KA2ik/urqGuDdGQtUoAMckur8UPswlH8ik6j5mhqUsQSIqwhlP0bdEQG0m yusgAMCuASL5Mkj9cmvn81hqF+TGfNn7aYWmmhT0jFHtUT2rIa6+PMRXgdcg X-ME-Proxy: Feedback-ID: i12284293:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 2 Jul 2026 10:27:52 -0400 (EDT) Received: by mbp.qyliss.net (Postfix, from userid 1000) id BF613845F893; Thu, 02 Jul 2026 15:38:24 +0200 (CEST) From: Alyssa Ross To: colbyt Subject: Re: [PATCH 8/8] vm-lib: allow app VMs to name closure roots In-Reply-To: <20260626185509.3715326-9-colby@colbyt.com> References: <20260626185509.3715326-1-colby@colbyt.com> <20260626185509.3715326-9-colby@colbyt.com> Date: Thu, 02 Jul 2026 15:38:18 +0200 Message-ID: <87echlwlyt.fsf@alyssa.is> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Message-ID-Hash: T6CEUJCJCCIKIVIK7JRHTDDCOAC3SFT6 X-Message-ID-Hash: T6CEUJCJCCIKIVIK7JRHTDDCOAC3SFT6 X-MailFrom: hi@alyssa.is X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: devel@spectrum-os.org X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --=-=-= Content-Type: text/plain colbyt writes: > make-vm copies the closure of the run path into the image. > > For app VMs that use lib.getExe, that can miss files from the package > output that owns the executable. Allow callers to pass explicit closure > roots, and use the package derivations for the foot and Firefox app VMs. > > Signed-off-by: colbyt Can you give an example of something it misses? If a store path depends on paths not in its closure, that's likely a packaging bug (outside of specific exceptions like /run/opengl-driver). --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRV/neXydHjZma5XLJbRZGEIw/wogUCakZpygAKCRBbRZGEIw/w okVGAQDZEcnoCEbnaqRhv+qTD3/ru/kjN6YhxiPHw0F76zSflAEAzC/OL9ruti/t 0nm1htCFLdyrRqmWS56kHJt6Y7OCiA4= =8Ciq -----END PGP SIGNATURE----- --=-=-=--