From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on atuin X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MALFORMED_FREEMAIL,RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2,SPF_HELO_PASS autolearn=no autolearn_force=no version=3.4.2 Received: from [127.0.1.1] (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id A94DCABE4; Thu, 17 Oct 2019 12:02:26 +0000 (UTC) Received: from smtp17.mail.ru (smtp17.mail.ru [94.100.176.154]) by atuin.qyliss.net (Postfix) with ESMTPS id 1DED3ABE0 for ; Thu, 17 Oct 2019 12:02:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mail.ru; s=mail2; h=Message-Id:Content-type:Mime-Version:REFERENCES:IN-REPLY-TO:Reply-To:Subject:Cc:To:From:Date; bh=84lTsEn1VaWTCTPR+LvHwowNYLjTUan5D60twEBhHs8=; b=b7cXWzIYpUV+rQwtmvGkhIbQrtcm3Jf1q6R9V/zWqf19fljaBKt52zY5wEV3yECuOIF/XAjWiMawAkfp4TNGViNyt80TV+K55GR4mZiK/kuwNvWS1H++ykOIMnrK0QHqVF+T2BLGMgvkTnkiWTqMNPKgvrcmqM4zgPkvH/pxsHA=; Received: by smtp17.mail.ru with esmtpa (envelope-from <7c6f434c@mail.ru>) id 1iL4U3-0003so-RW; Thu, 17 Oct 2019 15:02:24 +0300 Date: Thu, 17 Oct 2019 14:09:40 +0200 From: Michael Raskin <7c6f434c@mail.ru> To: hi@alyssa.is, devel@spectrum-os.org X-Mailer: cl-smtp (SBCL 1.5.6.nixos) IN-REPLY-TO: <87k193bo2u.fsf@alyssa.is> REFERENCES: (<87k193bo2u.fsf@alyssa.is> . <87k193bo2u.fsf@alyssa.is> <87pniwb7tp.fsf@alyssa.is> <87pniwb7tp.fsf@alyssa.is> <20191016202845.21132-1-hi@alyssa.is> <20191016202845.21132-1-hi@alyssa.is> ) Mime-Version: 1.0 Content-type: text/plain; charset="UTF-8" Message-Id: Authentication-Results: smtp17.mail.ru; auth=pass smtp.auth=7c6f434c@mail.ru smtp.mailfrom=7c6f434c@mail.ru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ailru-Sender: A682F7DD9AD981BB0A1DF9A7049206189892FA85623E21BC096A20E49017214ACC7E417CA509C940286CF1FB17F948F1E66B5C1DBFD5D09D5BDABB69D8D2C502C003600472B6CB9B67EA787935ED9F1B X-Mras: OK Message-ID-Hash: YKM2D27PKVCLNKQXHUJ2AD7UYQS2OALA X-Message-ID-Hash: YKM2D27PKVCLNKQXHUJ2AD7UYQS2OALA X-MailFrom: 7c6f434c@mail.ru X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; suspicious-header CC: jpo@vt.edu X-Mailman-Version: 3.2.2 Precedence: list Reply-To: 7c6f434c@mail.ru Subject: [spectrum-devel] Re: [PATCH www] design: state subdirectories, not block devices List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Post: List-Subscribe: List-Unsubscribe: >> On the other hand, JSON can be parsed and written easily in all >> languages we might want to use, even in Bash using jq. And we need some >> code to setup the namespaces, but nsjail/firejail/bubblewrap are C code >> so in the long term there would be some rewrite, probably in Rust??? And >> having Nix preprocess arguments for Rust code sounds strange. > >Not sure about this -- I think it's something we'll have to experiment >with. Maybe structured configuration isn't necessary -- it's a pain to >do in a CLI... Sure, this is more of my ??last line of defense?? position. My preference is definitely ??nice CLI whenever possible, with a fallback to complex structure stuff when unavoidable, and this fallback can be used together with the ncie CLI for the rest of the options?? >> And whatever you do, Nix evaluation is always just another layer before >> running the actual code for setting up the isolated environments that >> still needs to interpret its arguments. >> >> Also, I might want to use some binary cache, but when I am offline Nix >> builds wait for a long time for a reply from a binary cache. It's not so >> bad if I am intentionally building something and can pass an empty value >> for binary-caches via the command line, but doing it for each new >> command I execute sounds excessive. > >Yes, this is true, although I consider it a Nix bug. I shouldn't have >to remember to say --option substitute false for trivial offline >rebuilds. But there are cases where it would be hard for Nix to get right (the ??network won't become reachable?? part ??? the notion of triviality of the build is obviously hopeless even with manual declaration)