xattrs are revealing some unfortunate brittleness in real world derivations that are getting -EINVAL errors while executing their test code. The reason for this is that Linux checks [1] UID delegations for xattrs writes. In the Lix sandbox, except if you enabled a uid-range feature, you have exactly 3 UIDs: root, nixbld and nobody. If your test code makes use of UIDs which have not been delegated, you will receive an EINVAL on your operation. Test code is not resilient with respect to the number of available UIDs in their namespace. To avoid further issues for end users who are running into spurious derivation build failures, we forbid xattrs again for now. For more information about the plans, please consult or chime in [2]. Fixes NixOS#1105. Reopens NixOS#838. Fixes NixOS#1103. [1]: https://elixir.bootlin.com/linux/v6.18.6/source/fs/posix_acl.c#L257 [2]: https://zulip.lix.systems/#narrow/channel/9-Store/topic/disablement.20of.20xattrs/with/5295 Change-Id: I864066b34cd8319d2271fac1b179cb4f950d836e Signed-off-by: Raito Bezarius <raito@lix.systems>

Uh oh!

nix-shell: improve handling of mutiple-output dependencies #838

Description

Metadata

Metadata

Assignees

Labels

Fields

Projects

Milestone

Relationships

Development

Issue actions