| 30 May 2025 |
 jrick | forget GOPATH exists, the ones that matter are GOCACHE and GOMODCACHE | 18:31:18 |
 @s_r:matrix.org | I guess the thing that got me thinking about this is that I need to download any given module once, the first time I need it, but then I don't need to do that again even if I'm in a different shell | 18:34:07 |
| @s_r:matrix.org | which is convenient, but was counter intuitive at first | 18:34:32 |
| @s_r:matrix.org | I think I can live with that given that there is still a vendor hash | 18:34:55 |
| jrick | go's tooling already handles that with the module cache (albeit per-user) | 18:35:14 |
| @s_r:matrix.org | yeah, I know | 18:35:25 |
| @s_r:matrix.org | my issue is that it feels counter-nixy, but it is probably me, that's why I was asking | 18:35:49 |
| jrick | go cryptographically verifies the dependencies too so you're not going to risk building from different sources even if there is some download duplication | 18:37:19 |
| jrick | and the cache files are read-only so unless you intentionally try to break them... | 18:38:28 |
| @s_r:matrix.org | Yeah, that's probably ok | 18:38:29 |
| @s_r:matrix.org | the derivations are also build from fresh, if I understood the code right | 18:39:22 |
