 | Nix + dotnet | 127 Members |
| 24 Servers |
| Nix + dotnet | 127 Members |
| 24 Servers |
| Sender | Message | Time |
|---|---|---|
| 5 Dec 2024 | ||
 GGG | * or maybe not even a dependency graph, just a big set of used packages that we recursively walk upon | 22:14:29 |
 Corngood | I also did some work on using the nuget client API to figure out dependencies so that we could make, for example avalonia write separate outputs for its individual package, hook up dependencies, and map nuget package ids back to derivations. I got stuck on that one because I found the dependency solver extremely painful to use. | 22:16:06 |
| GGG | yeah, i also tried to use the nuget client when I was trying to convert nuget-to-nix to C# and it was really painful to use | 22:16:49 |
| Corngood | https://github.com/NixOS/nixpkgs/compare/master...corngood:nixpkgs:dotnet-avalonia.wip Here's one branch full of hacks. I was trying to do something along the lines of python/haskell, where we pull in nuget packages centrally. We'd then be able to replace them individually with source-built derivations. | 22:21:54 |
 dish [Fox/It/She] | I'm not a fan of introducing more generated stuff into nixpkgs, pythonPackages is all manual, nodePackages is getting dropped, lockfiles are being externalized as much as possible, etc. Is there a way to do this without introducing more generated code? | 22:25:23 |
| GGG | No, it is not possible | 22:26:14 |
| GGG | .NET's builtin lockfiles aren't widely used so we need to have in-tree generated ones | 22:26:39 |
| Corngood | I don't think we should be using binary packages from nuget.org at all, which means nixpkgs would have to know how to build everything from source. | 22:27:40 |
| GGG | I think that's going too far given the size of our team | 22:27:56 |
| Corngood | Yeah, we'll it's not in danger of happening any time soon :) | 22:28:20 |
| Corngood | But I think that's what makes nixpkgs great. It's just recipes to build lots and lots of software. | 22:29:27 |
| Corngood | Practical example: I wanted to patch a bug in csharp-language-server-protocol as used by omnisharp-roslyn. I had to add a new package for csharp-lanaguage-server-protocol, like this: https://github.com/corngood/nixpkgs/commit/4500ed36a9476510ab10af8c5744a48b40061d11 I usually don't run into problems like that with other languages, because they aren't pulling in things from binary blobs all over the place. | 22:39:44 |
| GGG | man, I wish there was an easy way to list all packages that use buildDotnetModule in nixpkgs | 22:39:43 |
| GGG | this treewide migration to JSON is going to be a pain | 22:39:49 |
| Corngood | take a look at: maintainers/scripts/update-dotnet-lockfiles.nix It abuses update.nix to find packages that have | 22:41:22 |
| GGG | yeah, I found that one | 22:41:35 |
| GGG | considering modifying it to add a rm deps.nix to the start of the script or something | 22:41:44 |
| GGG | or just outright modify fetch-deps to do that and then revert it after I finish running it | 22:41:58 |
| dish [Fox/It/She] | In reply to@gggkiller:matrix.org rg buildDotnetModule | 22:43:31 |
| Corngood | Sort of a tangent, but I've taken to running | 22:44:23 |
| dish [Fox/It/She] | what's the issue that you're worried about by not running it normally? /genq | 22:45:09 |
| GGG | that's a good idea | 22:45:10 |
| GGG | even more so since fetch-deps runs the packages' code, it might have untrusted code running | 22:45:32 |
| GGG | it shouldn't but who knows | 22:45:38 |
 Emma [it/its] | In reply to @corngood:corngood.comThatd be nice if all nuget packages actually had linked sources | 22:46:47 |
| Corngood |
Yeah, if I'm regenerating all lockfiles, or doing mass updates, that's a lot of peoples code being run. Lots of new packages going in without any real audits. Could end up bad either through malice or accident. | 22:47:13 |
| GGG | well, packages from nuget can run arbitrary code on installs, projects can also run arbitrary code on the restore stage and more | 22:47:27 |
| GGG | technically contributors should've audited it before adding all of that to nixpkgs, but you can never be too safe | 22:47:43 |
 lostmsu | Hey guys, I'm trying to see if there's a way to improve experience with C# code that has any kind of native dependencies (hi Avalonia). Would love you to chime in before I jumped to experimentation: https://github.com/NixOS-NET/Nix.NET/issues/1 | 22:49:01 |
| Emma [it/its] | In reply to @gggkiller:matrix.orgConcern is upstream adding fishy stuff and maintaineds just merging the auto prs | 22:49:03 |