On 9/02/2025 23:42, Morgan Arnold wrote:
Hi all,
As a bit of an aside, I'm wondering if it wouldn't be possible to eliminate the
possibility of even potential copyviols by a change to the `derivation`
function? It currently sets environment variable for the builder daemon by
setting `allowSubstitutes = 0` if `(not substitutable?)`. If
non-substitutability were propagated by doing something like instead setting
`allowSubstitutes = 0` if `(not substitutable?)` or if `(not (every
substitutable-derivation? inputs))`, wouldn't this suffice to ensure that an
initrd which contains non-substitutable inputs is properly marked
non-substitutable? [...]
This has effectively already been answered.
Best regards,
Maxime Devos
