[Nix-dev] More permissions on hydra for people with push access

Vladimír Čunát vcunat at gmail.com
Mon Feb 24 13:01:23 CET 2014


On 02/24/2014 09:56 AM, Peter Simons wrote:
> Would it be appropriate for "random people" (Nixpkgs
> contributors) to control what these machines do?

Note that in fact these "random people" people already *do* have control 
what the machines do. A simple push into master is enough to make them 
execute almost arbitrary code, for example...

And in both cases of Hydra and push access, if someone does mischief, he 
can instantly lose permissions for access.


As an example of annoyance, I asked in one PR thread for creating a 
job(set) to test that stdenv-changing update before merging, but I got 
no answer for almost a week now.
https://github.com/NixOS/nixpkgs/pull/1187#issuecomment-35402531


Vlada



More information about the nix-dev mailing list