!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

365 Members
Discussions around Security | Triaging happens in #security:nixos.org127 Servers

Load older messages


SenderMessageTime
20 Oct 2024
@emilazy:matrix.orgemilyhttps://lwn.net/Articles/991088/15:10:22
@emilazy:matrix.orgemilylooks like we're ahead in splitting out gssapi15:12:58
21 Oct 2024
@sandro:supersandro.deSandro 🐧 Debians poor depreciation processes hitting again 00:05:06
@hexa:lossy.networkhexasays distro who has an ever growing aliases file and other failings00:05:53
@hexa:lossy.networkhexa * says distro who has an ever growing aliases file, no proper deprecation cycle and other failings00:06:28
@emilazy:matrix.orgemilywhen was the last time the aliases file actually got trimmed?04:45:52
@emilazy:matrix.orgemily(do we even have a policy for how old aliases have to be to be removed?)04:46:38
@fabianhjr:matrix.orgFabián Heredia
In reply to @hexa:lossy.network
says distro who has an ever growing aliases file, no proper deprecation cycle and other failings
the aliases file gets pruned every release though (most warns get turned into a throw and throws get removed, so most aliases should only live up to a year there and be automagically moved along)
05:55:02
@fabianhjr:matrix.orgFabián Heredia
In reply to @emilazy:matrix.org
when was the last time the aliases file actually got trimmed?
I remember doing that in a recent release, I think 23.11
05:55:26
@fabianhjr:matrix.orgFabián Heredia
In reply to @emilazy:matrix.org
(do we even have a policy for how old aliases have to be to be removed?)
If I remember correctly 1 release for throws then auto-removal)
05:55:47
@fabianhjr:matrix.orgFabián Heredia
In reply to @emilazy:matrix.org
(do we even have a policy for how old aliases have to be to be removed?)
* If I remember correctly 1 release for throws then auto-removal.
05:55:50
@hexa:lossy.networkhexabut fabian11:16:05
@hexa:lossy.networkhexaremoving aliases without a warning is not ok!11:16:12
@hexa:lossy.networkhexahttps://github.com/nixos/nixpkgs/commit/0b6a7a953d7bc7aa453683919c7bbcadad739aa311:16:13
@hexa:lossy.networkhexahttps://github.com/nixos/nixpkgs/commit/e72450d032e3e6b28124e73400959cef4f064fd411:16:30
@hexa:lossy.networkhexa * removing aliases without a warning is not ok! \s 11:16:39
@hexa:lossy.networkhexaI'd say there is no consensus on removing them11:17:06
@hexa:lossy.networkhexaand if you tell the wrong person they'll try to revert 🙂 11:17:15
@hexa:lossy.networkhexathink of all the downstream consumers that are affected by this11:17:31
@hexa:lossy.networkhexa * think of all the downstream consumers that are affected by this 🤷11:18:14
@sigmasquadron:matrix.orgSigmaSquadronthe determinate systems community will never recover from this11:22:09
@emilazy:matrix.orgemilyso the idea is that we have to go alias → alias with warning → throw → removal?11:22:30
@emilazy:matrix.orgemily seems like that would make aliases.nix the most stable interface in the repository 11:22:42
@emilazy:matrix.orgemilyI can't imagine any reason to attach dates other than to remove later though11:23:10
@emilazy:matrix.orgemily seems to me like allowAliases is the warning 11:23:36
@hexa:lossy.networkhexaaliases should warn immediately imo 😛11:23:38
@hexa:lossy.networkhexayeah, kinda11:23:42
@hexa:lossy.networkhexabut I think people want eval traces11:23:51
@emilazy:matrix.orgemily til remove-old-aliases.py 11:24:14
@emilazy:matrix.orgemilyI feel like the fact that that script exists and that it was in the release process notes indicates a consensus that extends beyond one person's objections.11:24:47

Show newer messages


Back to Room ListRoom Version: 9