musl wip

[matthewbauer]

No description provided.

[cleverca22]

id recommend against importing nixpkgs like this, it makes it difficult to pin the version in a pure manner
instead try something like import (nixpkgs.path) {}

[cleverca22]

and similarly, accept a nixpkgs path as an input, so it doesnt rely on the current value of $NIX_PATH

[FRidh]

On CentOS 7.4 I have namespaces configured (I'm using them for sandboxed builds already) but using the binary (https://matthewbauer.us/nix) I get:

$ ./nix
Run the following as root to enable unprivileged namespace use:
sysctl -w kernel.unprivileged_userns_clone=1 ; echo kernel.unprivileged_userns_clone=1 > /etc/sysctl.d/nix-user-chroot.conf

Isn't that option Debian-specific?

---

I think related is lxc/lxc#842 (comment).

[tomberek]

I've been using this reliably for a while.

[matthewbauer]

I've been using this reliably for a while.

That's good! I think I will wait on this though just because most people don't have access to Musl stuff. It's a pretty big rebuild unless you use something like @dtzWill's AllVM cache.

[tomberek]

Can you hook into the musl builds of busybox that the NixOS bootstrap already uses?

[tomberek]

just uploaded a recent musl toolchain to arm.cachix.org, should save an hour or two