| 22 Feb 2025 |
 emily | In reply to @sandro:supersandro.de
Again If we would just still compile that software no one would complain not sure what the point of reiterating this discussion every time vulnerable packages come up is. it was hashed out pretty thoroughly on the PR. | 14:00:05 |
 Sandro π§ | because you're argumentation is wrong and it is hurting being honest about vulnerable packages and still allowing people to use software | 14:01:21 |
| emily | no, we just disagree about what Hydra should build. afaict you're the only person who considers that a reason that web browser engines with critical CVEs shouldn't be marked knownVulnerabilities though. | 14:03:25 |
| Sandro π§ | because I know people who do not have compile server flying around | 20:03:37 |
| Sandro π§ | and for them to use some software that requires hours compiling on their laptop is actually a very big problem | 20:05:56 |
| Sandro π§ | also retroactively bricking peoples setups on stable just because of that with no option out is especially stupid | 20:08:15 |
| Sandro π§ | if a config flip would just download the precompiled software again, that would be fine and actionable but then also having to compile the software is just stupid | 20:08:56 |
| emily | I really don't feel like relitigating this every couple weeks when there's a security issue. | 20:46:54 |
| 23 Feb 2025 |
|  bastaynav joined the room. | 10:37:25 |
|  amadaluzia[tde] joined the room. | 18:52:06 |
| Sandro π§ | I know that you value security way over usability of people | 20:54:28 |
| Sandro π§ | but it is just a fact that you cannot remove all vulnerable software from your life and still live. | 20:54:41 |
| Sandro π§ | but that has been an issue since I first heard of NixOS and 5 years back we already weighted marking things vulnerable and having them cached π€· | 20:56:28 |
| Sandro π§ | shawn8901: do you want to open a PR for https://github.com/Shawn8901/nixpkgs/commit/735fd4615f6e6844a25ad14638680024a3ff4be8 ? Even if we cannot change the default, I want those options in https://github.com/Shawn8901/nixpkgs/commit/735fd4615f6e6844a25ad14638680024a3ff4be8 | 20:56:48 |
| Sandro π§ | * shawn8901: do you want to open a PR for https://github.com/Shawn8901/nixpkgs/commit/735fd4615f6e6844a25ad14638680024a3ff4be8 ? Even if we cannot change the default, I want those options in. | 20:56:54 |
 shawn8901 | In reply to @sandro:supersandro.de
shawn8901: do you want to open a PR for https://github.com/Shawn8901/nixpkgs/commit/735fd4615f6e6844a25ad14638680024a3ff4be8 ? Even if we cannot change the default, I want those options in. Sure I can do tomorrow, I wasn't sure on the other PR when I asked if it was finally wanted or not. | 23:18:47 |
| shawn8901 | The options sadly can just be tuned by overriding the package. I am using that since some times as I am trying to reduce the perl usage on my systems | 23:21:29 |
| shawn8901 | * The options sadly can just be tuned by overriding the package. I am using that (salute backend) since some times as I am trying to reduce the perl usage on my systems | 23:22:23 |
| 24 Feb 2025 |
| amadaluzia[tde] changed their profile picture. | 13:55:16 |
| shawn8901 | Sandro π§: https://github.com/NixOS/nixpkgs/pull/384804 | 16:28:05 |
 K900 (Old) | Can we make that one option? | 17:05:52 |
| K900 (Old) | I don't think building all the backends is something that makes sense in most cases | 17:06:02 |
| K900 (Old) | Because it's not like you can (reasonably) switch at runtime anyway | 17:06:16 |
 πΌπ. π±ππ πππ π π·ππ | Why Discover doesn't have comments/rating feature on NixOS? | 18:30:48 |
| K900 (Old) | I think we don't have appstream metadata? | 18:31:11 |
| πΌπ. π±ππ πππ π π·ππ | but it gets it from flatpak? | 18:31:28 |
| K900 (Old) | Actually does it even work with flatpak | 18:31:33 |
| K900 (Old) | I'm not sure if it does | 18:31:39 |
| πΌπ. π±ππ πππ π π·ππ | yes | 18:31:44 |
| πΌπ. π±ππ πππ π π·ππ | i use it | 18:31:47 |
