[Nix-dev] how to go about refactoring nixos-container?

[Eric Merritt]

Kosyrev,

We are probably doing something pretty similar. We use nix to generate our images at all the various levels from testing through production. We use nixos-container as a cheap way to standup our system on the desktop. To that end I have been making changes. In the very short term, my goals are just to make the nixos-container command a bit more tractable and trust worthy. In the mid term I want to be able to spin up a container without root privileges. In the very long term, I want to orchestrate local infrastructure in the same way I do my remote infrastructure. All of this starts by making nixos-container a bit nicer to live in.

Eric




Sent from [ProtonMail](https://protonmail.com), encrypted email based in Switzerland.


-------- Original Message --------
Subject: Re: [Nix-dev] how to go about refactoring nixos-container?
Local Time: July 21, 2016 3:16 PM
UTC Time: July 21, 2016 10:16 PM
From: _deepfire at feelingofgreen.ru
To: eric at merritt.tech
CC: nix-dev at lists.science.uu.nl,dpaukaev at ptsecurity.com

Eric Merritt <eric at merritt.tech> writes:
> Maintainers,
>
> I have been spending a fair amount of time adding bits to
> `nixos-container` and expect to be spending more time there as I have
> started using it heavily for standing up and testing groups of
> systems. It's been tempting to refactor the command. Before doing that
> I wanted to ask the maintainers the path with the highest likelihood
> of being accepted, to avoid waisting a lot of time on dead ends.

Eric,

We, at Positive Technologies[1], are quite interested in employing Nix
for rootfs generation, and we already have some unreleased adaptations.

I think it would be quite nice if you had voiced your plans, so we could
coordinate in this effort -- that is, if I'm not mistaken and our goals
do indeed intersect.

Cc-ing Denis, who's doing work on this.

--
1. Using non-corporate email because it's subscribed to the list.
--
с уважениeм / respectfully / Z poważaniem,
Косырев Сергей
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.science.uu.nl/pipermail/nix-dev/attachments/20160722/929d77f3/attachment.html>