!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

363 Members
Discussions around Security | Triaging happens in #security:nixos.org126 Servers

Load older messages


SenderMessageTime
21 Oct 2024
@sandro:supersandro.deSandro 🐧third party can always check lib.version and do things conditional based on that12:22:04
@sandro:supersandro.deSandro 🐧we can't do reflection, so we probably should adapt the python script12:41:31
@fabianhjr:matrix.orgFabián Heredia
In reply to @emilazy:matrix.org
so the idea is that we have to go alias → alias with warning → throw → removal?
alias with warn (now that warn exists) -> throw -> removal
17:02:00
@emilazy:matrix.orgemilyhm, what do you mean "now that warn exists"?17:02:15
@fabianhjr:matrix.orgFabián Herediaskipping the first one17:02:16
@fabianhjr:matrix.orgFabián Herediaof only alias without warn17:02:22
@fabianhjr:matrix.orgFabián HerediaThere was a time when aliases couldn't warn not too long ago if I recall correctly17:02:50
@fabianhjr:matrix.orgFabián Herediaabout 2-3 releases ago17:03:00
@emilazy:matrix.orgemilyright17:03:12
@fabianhjr:matrix.orgFabián Herediaand previous flow was to directly throw on aliases that were going to be removed / had a planned removal.17:03:41
@emilazy:matrix.orgemily I was thinking we could just lib.mapAttrs (k: v: lib.warn "hey man stop using ${k}" v) the aliases.nix attrset 17:03:42
@emilazy:matrix.orgemilyI don't know if that's crazy or not.17:03:54
@emilazy:matrix.orgemily maybe even do a tryEval dance so it'll only warn on things that aren't already throws 17:04:14
@fabianhjr:matrix.orgFabián HerediaBut not all aliases there are intended to be removed, there is a top level comment on the syntax of comments to avoid auto move to throw/auto removal from the prune script17:04:29
@fabianhjr:matrix.orgFabián Heredia
# A script to convert old aliases to throws and remove old
# throws can be found in './maintainers/scripts/remove-old-aliases.py'
17:05:15
@fabianhjr:matrix.orgFabián Heredia
# Add 'preserve, reason: reason why' after the date if the alias should not be removed.
# Try to keep them to a minimum.
17:05:39
@emilazy:matrix.orgemilywell, we could separate out the ones not to be removed into another section.17:05:47
@emilazy:matrix.orgemily { …preserve… } // lib.mapAttrs … 17:05:53
@emilazy:matrix.orgemilythat's probably a good thing anyway17:05:58
@emilazy:matrix.orgemilysince it lets us see which ones are more load-bearing17:06:04
@emilazy:matrix.orgemilyFWIW there's only 4 of them.17:06:39
@emilazy:matrix.orgemilyand a couple of them I find dubious, but that's another matter17:06:53
@fabianhjr:matrix.orgFabián Herediahttps://github.com/NixOS/nixpkgs/pull/35028917:14:37
@emilazy:matrix.orgemilyshouldn't the cut-off be 24.05?17:17:47
@emilazy:matrix.orgemilysince everything it removed would have been throwing for an entire release cycle?17:17:56
@fabianhjr:matrix.orgFabián Herediayeah17:18:00
@fabianhjr:matrix.orgFabián Herediabut this does mean that those weren't removed the previous cycle17:18:17
@emilazy:matrix.orgemilyhmm17:19:09
@emilazy:matrix.orgemilyimage.png
Download image.png
17:19:14
@emilazy:matrix.orgemilyshould probably make it 2023-11 at least17:19:17

Show newer messages


Back to Room ListRoom Version: 9