!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

363 Members
Discussions around Security | Triaging happens in #security:nixos.org126 Servers

Load older messages


SenderMessageTime
21 Oct 2024
@emilazy:matrix.orgemilyI don't know if NixOS configurations are really the most relevant case here? since it's quite easy to just react to "hey, this alias X is now Y, please migrate to that" on updates there. not that it'd be nice to be able to be more proactive but the quoted justification for this kind of extended compatibility cycle I've seen has always been third-party modules that want to support multiple Nixpkgs versions at once, etc.12:20:59
@sandro:supersandro.deSandro 🐧third party can always check lib.version and do things conditional based on that12:22:04
@sandro:supersandro.deSandro 🐧we can't do reflection, so we probably should adapt the python script12:41:31
@fabianhjr:matrix.orgFabián Heredia
In reply to @emilazy:matrix.org
so the idea is that we have to go alias → alias with warning → throw → removal?
alias with warn (now that warn exists) -> throw -> removal
17:02:00
@emilazy:matrix.orgemilyhm, what do you mean "now that warn exists"?17:02:15
@fabianhjr:matrix.orgFabián Herediaskipping the first one17:02:16
@fabianhjr:matrix.orgFabián Herediaof only alias without warn17:02:22
@fabianhjr:matrix.orgFabián HerediaThere was a time when aliases couldn't warn not too long ago if I recall correctly17:02:50
@fabianhjr:matrix.orgFabián Herediaabout 2-3 releases ago17:03:00
@emilazy:matrix.orgemilyright17:03:12
@fabianhjr:matrix.orgFabián Herediaand previous flow was to directly throw on aliases that were going to be removed / had a planned removal.17:03:41
@emilazy:matrix.orgemily I was thinking we could just lib.mapAttrs (k: v: lib.warn "hey man stop using ${k}" v) the aliases.nix attrset 17:03:42
@emilazy:matrix.orgemilyI don't know if that's crazy or not.17:03:54
@emilazy:matrix.orgemily maybe even do a tryEval dance so it'll only warn on things that aren't already throws 17:04:14
@fabianhjr:matrix.orgFabián HerediaBut not all aliases there are intended to be removed, there is a top level comment on the syntax of comments to avoid auto move to throw/auto removal from the prune script17:04:29
@fabianhjr:matrix.orgFabián Heredia
# A script to convert old aliases to throws and remove old
# throws can be found in './maintainers/scripts/remove-old-aliases.py'
17:05:15
@fabianhjr:matrix.orgFabián Heredia
# Add 'preserve, reason: reason why' after the date if the alias should not be removed.
# Try to keep them to a minimum.
17:05:39
@emilazy:matrix.orgemilywell, we could separate out the ones not to be removed into another section.17:05:47
@emilazy:matrix.orgemily { …preserve… } // lib.mapAttrs … 17:05:53
@emilazy:matrix.orgemilythat's probably a good thing anyway17:05:58
@emilazy:matrix.orgemilysince it lets us see which ones are more load-bearing17:06:04
@emilazy:matrix.orgemilyFWIW there's only 4 of them.17:06:39
@emilazy:matrix.orgemilyand a couple of them I find dubious, but that's another matter17:06:53
@fabianhjr:matrix.orgFabián Herediahttps://github.com/NixOS/nixpkgs/pull/35028917:14:37
@emilazy:matrix.orgemilyshouldn't the cut-off be 24.05?17:17:47
@emilazy:matrix.orgemilysince everything it removed would have been throwing for an entire release cycle?17:17:56
@fabianhjr:matrix.orgFabián Herediayeah17:18:00
@fabianhjr:matrix.orgFabián Herediabut this does mean that those weren't removed the previous cycle17:18:17
@emilazy:matrix.orgemilyhmm17:19:09
@emilazy:matrix.orgemilyimage.png
Download image.png
17:19:14

Show newer messages


Back to Room ListRoom Version: 9