nix-bundle icon indicating copy to clipboard operation
nix-bundle copied to clipboard
verified publisher icon matthewbauer

musl wip

Open matthewbauer opened this issue 7 years ago • 5 comments

matthewbauer avatar Apr 10 '18 20:04 matthewbauer

On CentOS 7.4 I have namespaces configured (I'm using them for sandboxed builds already) but using the binary (https://matthewbauer.us/nix) I get:

$ ./nix
Run the following as root to enable unprivileged namespace use:
sysctl -w kernel.unprivileged_userns_clone=1 ; echo kernel.unprivileged_userns_clone=1 > /etc/sysctl.d/nix-user-chroot.conf

Isn't that option Debian-specific?

I think related is https://github.com/lxc/lxc/issues/842#issuecomment-225920761.

FRidh avatar May 11 '18 08:05 FRidh

I've been using this reliably for a while.

tomberek avatar Sep 23 '18 21:09 tomberek

I've been using this reliably for a while.

That's good! I think I will wait on this though just because most people don't have access to Musl stuff. It's a pretty big rebuild unless you use something like @dtzWill's AllVM cache.

matthewbauer avatar Sep 28 '18 21:09 matthewbauer

Can you hook into the musl builds of busybox that the NixOS bootstrap already uses?

tomberek avatar Sep 28 '18 22:09 tomberek

just uploaded a recent musl toolchain to arm.cachix.org, should save an hour or two

tomberek avatar Oct 10 '18 04:10 tomberek