IRC channel logs
2024-08-22.log
back to list of logs
<abcdw>weary-traveler: right, forgot to paste it :) unbound top-level #("./scheme/hoot/simple.scm" 0 1) define-module <jfred>I ran across Garnix today (https://garnix.io/) and it got me thinking about how one might do the same safely in Guix. The fact that Guix manifests are written in a full programming language suggests more caution is warranted, but maybe a job for capabilities? <jfred>(Not that converting Guix manifests to a capability-safe Scheme subset/module system would be anything short of a gargantuan task...) <civodul>note that we have a similar problem with qa.guix.gnu.org, which takes patches from the mailing list <jfred>civodul: ah, yeah, something like that could work too for channels. could be s-expressions too, if you treat them as pure data rather than evaluating anything in them <jfred>good point re: qa though yeah, I was wondering what protections were there for that (but obviously wasn't going to test it on the live instance!) <civodul>there are discussions about running inferiors in containers in the past