Eelco Dolstra
Eelco Dolstra
`--foreign` is not very descriptive as an option name. Maybe `--all-systems` or something like that?
IMHO it shouldn't be possible for submodules to modify the super-configuration at all. I.e. it should not be possible for `security.acme.certs` to modify `services.systemd.services`. The big problem with the NixOS...
> How does it break hermeticity? Because it accepts arguments from outside of the flake. So if a user does `nix build flake#hydraJobs.`, they'll get a different result from what...
In theory this is already supposed to work. From the code: ``` # If we're not running on Linux, then perform the build on the # target machines. FIXME: Also...
Hm, calling `uname` on every machine seems unnecessary. Presumably NixOps already knows the architecture of the remote machines (e.g. from the `nixpkgs.system` option).
The problem with a push host is that there is no guarantee that it has connectivity to the other machines (e.g. if you deploy a network with EC2 machines in...
> It just feels inconistent It isn't. * `nix flake update`: Recreates the entire lock file, thus updating everything. * `nix flake lock`: Add missing locks, optionally updating some locks...
> nix flake update --add-missing # replaces `nix flake lock`, which is seldomly called on its own I don't think this is true. It's pretty common to add a new...
@sbourdeauducq On hydra.nixos.org we have: ``` nix.extraOptions = '' allowed-uris = https://github.com/ https://git.savannah.gnu.org/ ''; ```
Yeah regressions should be fixed.