3 ms·
Nix isn't the only package manager for home directories or source packages. Working in a home directory doesn't require sudo or a daemon. sudo doesn't mean run
by pseudalopex 4y ago
Nix isn't the only package manager for home directories or source packages. Working in a home directory doesn't require sudo or a daemon. sudo doesn't mean run everything as root.
- soraminazuki 4y agoYou missed the crucial point: > So you need non-admin users to be able to use it too The build daemon and the user are used for privilege separation. The separation goes both ways. Users can't write directly to /nix/store and Nix can't write outside of /nix/store during build. If anything, it's there to make things less invasive. It's nothing like the Docker daemon, which is a proxy for root. Additionally, the daemon doesn't do anything unless users request that a package be built.
- pseudalopex 4y agoOther package managers have privilege separation without daemons. I don't need non admin users to run it. And I could configure sudo to let them if I did.