Nix Rust | 671 Members | |
| Rust | 154 Servers |
| Sender | Message | Time |
|---|---|---|
| 24 Nov 2025 | ||
| * That's basically yanked packages, which that prototype tool already filters out automatically. But unfortunately yanked packages cannot be relied on for security. | 17:34:48 | |
| Since it could be an unmaintained package, so the author would not yanked it | 17:35:13 | |
| * Since it could be an unmaintained package, so the author would not yank it | 17:35:17 | |
| I have another PR up that if combined with yanked package elimiation would catch CVEs https://github.com/NixOS/nixpkgs/pull/458881 | 17:36:16 | |
| * I have another PR up that would catch CVEs https://github.com/NixOS/nixpkgs/pull/458881 | 17:36:25 | |
| oh that's amazing! | 18:16:46 | |
| 25 Nov 2025 | ||
| Why not do it like this and collect them using nix?
| 14:10:21 | |
| just realized I'm running Hacksaw with xcb-0.9, which contains a CVE 💀 i hope bumping it to 1.6 won't break anything | 14:13:02 | |
| Yes of course there is more processing to do. This was just an idea I had and I wanted to see how large the JSON file would actually be. This doesn't actually change anything. | 19:05:27 | |
| * Yes of course there is more processing to do. This was just an idea I had and I wanted to see how large the JSON file would actually be. This doesn't actually fix anything. | 19:12:04 | |
| This should help with merge conflicts I think, no? | 19:56:20 | |
| The idea of processing all the crates into one file is to eliminate merge conflicts from being possible in the first place | 19:58:38 | |
| Since the maintainer(s) of the package set would just regenerate the entire file every week or so | 19:59:03 | |
| Another idea I have been ruminating upon is something like:
| 20:09:31 | |
| Yeah that's basically what I wanted to achieve with my script | 21:07:07 | |
| 28 Nov 2025 | ||
| 18:06:53 | ||
| 29 Nov 2025 | ||
| 11:40:45 | ||
| 30 Nov 2025 | ||
| 22:49:08 | ||
| 1 Dec 2025 | ||
| Hello. I've been using nix and nixos for a while. I noticed that in the changelog for the new stable release that there was a few rust projects. How can I get involved as a newcomer, with some decent rust and nix experience? | 01:16:38 | |
In reply to @akompella:matrix.orgeveryone can submit their fixes to Nixpkgs. if you wanna take responsibility for specific packages/modules, add yourself to their maintainers (see readmes under maintainers and pkgs on how) | 04:47:35 | |
| Thank you. I am planning currently to submit a PR to nixpkgs for a package I haven't seen on there, and I'll take a look at taking responsibility for other packages once I go through the process once myself, I hadn't considered that. However, I was asking more about the nix / nixos tooling / projects rather than projects in nixpkgs. | 08:34:44 | |
| Nixos tooling that is Rust mostly lives inside nixpkgs | 09:03:53 | |
| Nix itself doesn't use Rust | 09:03:58 | |
| Lix, a Nix fork, uses Rust somewhat, and plans for more Rust in the future | 09:04:10 | |
| See also the recent activity in https://github.com/nix-community/harmonia | 09:06:34 | |
| An all-Rust daemon should not be much more work away | 09:07:03 | |
| 3 Dec 2025 | ||
I have set cargoCheckType = "debug" and the env variable still shows "release". Are we supposed to set it as an env variable?I saw some derivations that set cargoCheckType in their attrs... | 18:07:18 | |
Should work unless you are using buildRustPackage then you need to set checkType and not cargoCheckType | 18:15:44 | |
| 21:27:05 | ||
| When writing a flake.nix for a Rust project I'm authoring (i.e. it'll bundle the flake), are there reasons to use anything other than nixpkgs's buildRustPackage? | 22:20:37 | |