3 people cba05329ee libstore: use pasta for FODs if available ...

This allows using a userspace program, pasta, to handle comms between
the build sandbox, and the outside world; allowing for full isolation
including the network namespace, closing the "fixed-output derivation
talks to the host over an abstract domain socket" hole for good.

Fixes CVE-2025-46416.

Co-Authored-By: Puck Meerburg <puck@puckipedia.com>
Change-Id: Ifd499b7dbb3784600a6e842fede65fc031ff9f15

2025-06-24 10:50:36 +00:00

..

functional

libexpr: fix checkSourcePath purity regression

2025-03-04 18:15:15 +01:00

functional2

libexpr/flake: user friendly error if parsing flake.lock fails

2025-03-17 19:01:23 +00:00

installer

chore: rebrand Nix to Lix when it makes sense

2024-06-01 20:31:24 +02:00

nixos

libstore: use pasta for FODs if available

2025-06-24 10:50:36 +00:00

unit

libutil: guess or invent a path from file descriptors

2025-06-23 16:50:44 +02:00

repl-completion.nix

Merge pull request #10799 from hercules-ci/safer-tab-completion

2024-06-16 04:03:32 +00:00