M1 dev setup with a virtual Linux box

Re:M1 dev setup with a virtual Linux box by ccouzens on Sunday April 11, 2021 @08:00AM (#26769686)

I don't know much about nix.

Does it solve the security problem by preventing access to the majority of your home directory?

Or solve it by only allowing you to install vetted libraries?

[ Parent | on HN ]

Re:M1 dev setup with a virtual Linux box by rowanG077 on Sunday April 11, 2021 @08:09AM (#26769733)

You cannot access the home directory at all during a nix build.

[ Parent | on HN ]

Re:M1 dev setup with a virtual Linux box by mixmastamyk on Sunday April 11, 2021 @04:50PM (#26773295)

Interesting, what about when your software runs? Is it still in a chroot or similar?

[ Parent | on HN ]

Re:M1 dev setup with a virtual Linux box by rowanG077 on Sunday April 11, 2021 @06:41PM (#26774169)

It's not running in a sandbox. That's not the goal of nix. It's only a package manager/build system.

[ Parent | on HN ]

Re:M1 dev setup with a virtual Linux box by mixmastamyk on Sunday April 11, 2021 @09:48PM (#26775383)

Oh, then why can it not access the home folder?

[ Parent | on HN ]

Re:M1 dev setup with a virtual Linux box by rowanG077 on Monday April 12, 2021 @03:43AM (#26776885)

The build process is sandboxed. Not the environment you run the application in afterwards.

[ Parent | on HN ]