Dear Guixers,
I want to build gcc with --enable-default-ssp and --enable-default-pie, and
have all packages built with gcc to be built by my hardened gcc, since Guix
does not have a hardened toolchain yet.
How might I define a custom gcc that I can recompile all my packages with? I
have this i
Hi Guix,
Someone on firejail Github discussions [1] wants to know the difference between
guix containers and firejail.
1. How does guix shell --container compare to firejail in terms of
sandboxing/security? Are guix containers intended to be secure?
2. Containers are still experimental, are th
