Skip to content

Conversation

@jaysa68
Copy link
Member

@jaysa68 jaysa68 commented Dec 16, 2025

No description provided.

Copy link
Contributor

@dotlambda dotlambda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This means trusting https://devenv.cachix.org for any substitution, i.e., any package can be fetched from there. I assume that's fine because domenkozar is trustworthy but we might prefer hosting our own cache using e.g. https://github.com/zhaofengli/attic. That way we could also cache other builds people want to have easy access to.
EDIT: Actually, if we use trusted-substitutors it will only be used if someone explicitly enables it. See https://nix.dev/manual/nix/2.32/command-ref/conf-file.html#conf-trusted-substituters. But that still means technically any package can be fetched from there by untrusted users who run nix build etc. on an OCF machine.

Co-authored-by: dotlambda <ocf@dotlambda.de>
@jaysa68
Copy link
Member Author

jaysa68 commented Dec 17, 2025

ok, im down to give attic a shot and work on a local cache later, but for now, it is pretty nice to have devshells build quickly on desktops...

@dotlambda
Copy link
Contributor

dotlambda commented Dec 17, 2025

Sounds good!
I've never used devenv. Do you know what it is that is cached on cachix? I'm sure you can put together your own devenvs that won't be cached.

devenv.cachix.org is added to the list of pull caches by default.

It mirrors the official NixOS cache and is designed to provide caching for the devenv-nixpkgs/rolling nixpkgs input.1

actually sounds like it wouldn't cache anything new.

Footnotes

  1. https://devenv.sh/binary-caching/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants