Re: Building, packaging and updating Guix with confidence

Hi Josselin, I have some naive questions below :) On +2022-07-07 16:34:17 +0200, Josselin Poiret wrote: > Hello, > > Zhu Zihao writes: > > > If your foreign function use case is very trivial? Why not give Guile > > dynamic FFI a try? > > That could be another option, but I'd like to have autoc

Re: grafted package and CLI

Hi Simon, On +2022-07-07 18:58:41 +0200, zimoun wrote: > Hi, > > On Thu, 07 Jul 2022 at 17:09, Ludovic Courtès wrote: > > > You mean hide with the ‘hidden?’ property? > > I do not know what I mean. ;-) > > The replacement could have an ’hidden?’ property or not being > ’define-public’. > >

Re: “Building a Secure Software Supply Chain with GNU Guix”

Good article! There's still some questions to ask. I'm concerned about the safety of the evaluation of channel code. IIRC, there's no sandbox for the evaluation of package in channel. So, it's possible to inject some side-effect code into a channel like ``` (define-module (my channel code)) (di