Robert Hensing

Ignore git-crypt secrets

1

Secrets must not be written to the nix store. Currently `${gitignoreSource ./.}` writes git-crypt's unlocked secrets to the store (if there are any in the directory). In an ideal world,...

Proposed in https://github.com/NixOS/nix/issues/3096 Turn `safeGetNodeType` implementation into a polyfill.

Store paths are typically already freshly fetched clean repos Advantages: - no interference from ~/.gitconfig etc - smaller code path footprint for projects that use dependencies that use gitignore -...

Test with submodules

2

The current logic wasn't written with submodules in mind. Things to test: - traversing into a submodule - correctness of gitignore rules processing inside a submodule

Probably something that has to be fixed on the nixpkgs side of the docs generation. https://docs.hercules-ci.com/arion/options/#_services_name_image_name

Darwin / macOS support

3

- [x] fix unit tests, add to CI #83 - [ ] add linux builder setup instructions to README - [ ] user testing / instructions how to use correctly...

Currently broken when backend is podman. Volumes are mounted read-only instead of rw. Found a related problem while troubleshooting https://github.com/NixOS/nixpkgs/pull/143989, but that does not cover read-only issue.

Try Docker Compose 2

1

Not packaged yet. It's supposed to run as a docker 'plugin', but if Nixpkgs will package it separately, that would be nice, because we shouldn't have to use the docker...

Inaccurate error in arion exec when service does not exist

1

> You must provide a command via service.defaultExec or on the command line. Validate the service name first; only then proceed to the defaultExec logic. Bonus points for giving the...