Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the 'ca-references' feature check #5247

Merged
merged 1 commit into from
Sep 14, 2021

Conversation

edolstra
Copy link
Member

CA paths with references seem stable enough so I don't think we need to keep it behind a feature check.

Fixes #3422.
Fixes #4425.

@edolstra
Copy link
Member Author

Also CC @Ericson2314.

Copy link
Member

@thufschmitt thufschmitt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome!

@edolstra edolstra merged commit d589a6a into NixOS:master Sep 14, 2021
@edolstra edolstra deleted the stablize-ca-references branch September 14, 2021 13:42
@Ericson2314
Copy link
Member

I don't think CA self references should be stable yet.

@Ericson2314
Copy link
Member

Based on what @regnat says in #4849 (comment), I am not even sure all the self references in all locations are implemented right, yet.

@Ericson2314
Copy link
Member

Ericson2314 commented Sep 14, 2021

Moreover, I don't see the practical benefit of doing this: most useful stuff would be still blocked by CA-derivations, but one can now add-to-store in in ways? Seems we are giving up a few degrees of design freedom for no one's benefit.

@Ericson2314
Copy link
Member

Finally, I want to establish the convention that features only become stable with RFCs. Sure this is fairly trivial, but people already have misgivings about whether RFCs work, I don't want to throw fuel on the fire.

@edolstra
Copy link
Member Author

We need CA references for nix profile. I don't think it needs self-references though, so we could put those behind a feature check.

@Ericson2314
Copy link
Member

Will nix profile become stable soon? I wonder if we could also use a built-in derivation builder like corepkgs's fetchurl does to punt on that issue for now.

In general, I'm a big fan of those built-in derivations.

@edolstra
Copy link
Member Author

nix profile actually moved away from using the built-in derivation (used by nix-env) to simplify things. It just builds the symlink tree client-side and calls addToStore().

@Ericson2314
Copy link
Member

I'm not sure what's better about that? Besides avoiding unstable features, a derivation allows downstream derivations in a nice way. That could be be useful for CI-ing a bunch of people's personal environments.

Still, just making non-self-references stable is most or the benefit. Seeing a little mini-RFC for that would be great to help build confidence in the governance mechanism.

@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/nix-profile-install-cannot-add-path-lacks-a-valid-signature/16106/2

@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/content-addressed-nix-call-for-testers/12881/144

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
4 participants