@dalias OK, that's fair. Nonetheless, I must point out that both philosophies have produced different results, whether you find that user hostile seems to depend on your definition of user (for example, you but not me). You talked about "imposition of policy" in another thread, I must say that conversely this sort of final opinion is also for me the consequences of "imposition of policy" unilaterally by like-minded thinkers.

So in the end, I find these arguments hard to accept as criticism.

@dalias I maintain a distribution that probably exercises more code of systemd than any other distribution out there, it's not beautiful, there's a lot of issues but what I don't really understand after dealing with the alternatives is that other people seemingly *not involved* into working with the object of interest doing weird over-intellectualization of system design to discuss abstract problems related to that ecosystem.

@dalias What I find fascinating is that the discussion always goes like this and I am still unable to find a satisfying understanding of that behavior beyond different tastes and colors and a strange feeling of reading FUD (about user hostile behavior).

But I would be glad to understand that I am completely wrong and missing the point and actually the problem is **concretely** X, Y, Z.

@dalias Fair enough, be it related to dbus or tight coupling, I am afraid I am still unable to grasp what point you are articulating *concretely* with that. I see mostly theoretical concern, not grounded in modern and actual blockers you might have encountered because I still cannot derive a concrete instantiation of what you are saying, applicable to objects I am familiar with.

@alxlg @zimoun @adamhsparks NixOS developer here, I think that OCI ecosystem has unfortunately no chance to give the practical reproducibility constraints that Guix (or Nix but whatever) can offer you.

I'd look at it from a social PoV, there's no incentive, no interest for the OCI ecosystem to offer this sort of feature because industry does not care about this sort of thing.

*wears tvix.dev developer hat* ComposerFS is inferior to better store solutions for large dataset too.

@tcltk @clacke @nixos @tcl interesting, how realistic Tcl can become a replacement for bash for building derivations and having phases, etc. ? (aka nixpkgs stdenv)

Did anyone try?

@tcltk @clacke @nixos @tcl but we use bash and we do have folks maintaining perl stuff and bash stuff

Though the question is really: what is the Tcl ecosystem? Is it still full of people, active development, can upstream work with us, etc. Which are very interesting and desirable properties.

PSA: https://github.com/NixOS/calamares-nixos-extensions/security/advisories/GHSA-3rvf-24q2-24ww

If you installed #NixOS using the graphical *Calamares* installer on a non EFI system with a LUKS rootfs or have any LUKS partition which is not a rootfs.

Your LUKS encryption key has been exposed in the /boot partition, potentially unencrypted or encrypted via GRUB cryptodisk.

We consider this to be a serious vulnerability and we are disclosing it immediately as it was found in the Heads project.

We are exploring automatic remediation in https://github.com/NixOS/nixpkgs/pull/240411.

@dansup On the 0.11.6 tag branch?