Nix: An idea whose time has come

Re:Nix: An idea whose time has come by bpye on Saturday February 19, 2022 @02:31AM (#30395109)

When you list the sources for a Nix package you also have to specify the hash expected. If it pulls the sources and the hash doesn't match then the package will fail to build.

[ Parent | on HN ]

Re:Nix: An idea whose time has come by slapslash on Saturday February 19, 2022 @03:37AM (#30395430)

Ahh, I see. But couldn‘t the hash then also be used on the packages themselves?

[ Parent | on HN ]

Re:Nix: An idea whose time has come by rgoulter on Saturday February 19, 2022 @06:39AM (#30396345)

The package in the cache which it's downloaded from?

I think so. It would be a bit more involved that "replace the package for gcc-11". The packages are addressed by the inputs which built them.

There has been some effort towards supporting content-addressable storage. https://www.tweag.io/blog/2020-09-10-nix-cas/ https://edolstra.github.io/pubs/secsharing-ase2005-final.pdf

[ Parent | on HN ]