| 25 Nov 2025 |
 Sergei Zimmerman (xokdvium) | If you think that we’ve sufficiently covered all regression then yeah. There’s also a 2.32 backport with revert | 22:36:30 |
 Taeer Bar-Yam | I imagine there's more tests we could cook up, but we can always add those later | 22:37:43 |
| Sergei Zimmerman (xokdvium) | Mhm probably. piegames did mention that they will have a bunch of tests we should yoink | 22:38:38 |
| Taeer Bar-Yam | nice | 22:38:57 |
| Sergei Zimmerman (xokdvium) | When those materialize | 22:38:59 |
| Taeer Bar-Yam | and i started playing around with fuzzing. inshallah i get that working soon and we'll get more tests from that | 22:39:16 |
| Sergei Zimmerman (xokdvium) | Yes please… pannae had that working at some point for the Lix parser rewrite, but it’s better late than never right? | 22:39:58 |
| 26 Nov 2025 |
|  Jens Petersen joined the room. | 06:21:01 |
| Jens Petersen | Hello, I am the new Fedora nix package maintainer 👋 | 13:01:55 |
| Jens Petersen | Is /nix/var/nix/builds/ only used/needed for nix-2.30 and later? | 13:02:44 |
 dramforever | yes, it's the default for 2.30+, but uh... why do you want to know? | 13:03:31 |
| dramforever | https://nix.dev/manual/nix/2.30/release-notes/rl-2.30 | 13:03:41 |
| Jens Petersen | Or was it also backported for the cve? | 13:04:38 |
| Jens Petersen | Well because I want to include the directory in fedora... | 13:04:59 |
| Jens Petersen | But for Fedora EPEL I will ship nix | 13:05:17 |
| Jens Petersen | * But for Fedora EPEL I will ship older nix | 13:05:27 |
| dramforever | uh... do you need to know the internal structure of /nix/var/nix? | 13:05:35 |
| Jens Petersen | Yes | 13:05:46 |
| Jens Petersen | This is an installation issue really | 13:06:25 |
 hexa | to 2.24 I think | 13:09:32 |
| hexa | https://github.com/NixOS/nix/commits/2.24-maintenance/
https://github.com/NixOS/nix/commit/b0fab9f90b397a2b02f41df5f467ae3cf8b91c3c | 13:09:48 |
| Jens Petersen | Hmm interesting so in nixos seems only /nix/store has "special treatment" eg is owned by nixbld and has sticky bit | 13:10:11 |
| dramforever | yes | 13:10:45 |
| dramforever | i ... don't see the backporting of /nix/var/nix/build in 2.24 | 13:11:09 |
| dramforever | i don't think it was backported | 13:11:53 |
| hexa | I don't think that was ever backported | 13:12:06 |
| dramforever | so the answer is no | 13:12:19 |
| hexa | but what I linked is the remainder of the security fixes | 13:12:28 |
| dramforever | it's 2.30+ only | 13:12:23 |
| hexa | * but what I linked is the remainder of the security fixes that were | 13:12:32 |
