Post B6EV6tSnZQHvkgd3po by zimoun@sciences.re
 (DIR) More posts by zimoun@sciences.re
 (DIR) Post #B6DoSfGElAly2rt8Ou by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       “Time travel without borders”https://guix.gnu.org/en/blog/2026/time-travel-without-borders/On the freshly implemented ability of ‘guix time-machine’ and ‘guix pull’ to download channel files without putting you at risk.#Guix
       
 (DIR) Post #B6DpLa5fgWVpw88HAG by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @swheritage: you might like how we put SWHIDs and the archive to good use. 👆
       
 (DIR) Post #B6DxesYi2kgOLnQZv6 by jfred@jawns.club
       0 likes, 0 repeats
       
       @civodul Ooh, exciting!I wonder if someday it could be possible to evaluate channel code in sandboxes as well, so trusting a channel becomes less of a concern. But I know that gets a lot more complicated than evaluating only the channel file itself in a sandbox
       
 (DIR) Post #B6E3ZjI9fb7bt1c1Pk by zimoun@sciences.re
       0 likes, 0 repeats
       
       @khinsen About loading manifest.scm inside isolated Guile environment, it might be more annoying than expected.  For instance, channels.scm files are usually very boilerplate and already two reports:https://codeberg.org/guix/guix/issues/8519https://codeberg.org/guix/guix/issues/8573Well, an option for being able to isolate might be helpful but it should not be the default for manifest.scm file, IMHO.@civodul
       
 (DIR) Post #B6E3ZjUYvT2wVVPvkm by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @zimoun Only channel files are isolated, not manifests.@khinsen
       
 (DIR) Post #B6E3pzuHfCYc3BChn6 by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @jfred It would get a lot more complicated and I’m not sure it’s worth the effort: if you’re going to install packages from a channel, then those packages matter too.Put differently, if you trust the packages provided by a channel, you might just as well trust its package definitions and modules.
       
 (DIR) Post #B6E3s8SuoWgvAoQE64 by SReyCoyrehourcq@sciences.re
       0 likes, 1 repeats
       
       @civodul Really nice !! So we could now just pass a one line command with swhid to reproduce a paper, this is great !  Really useful for RZine Reproducible R Paper in the future ( cc @mattiabunel )
       
 (DIR) Post #B6E4Gp2cAaLYAatL9s by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @khinsen @zimoun Oh but the question is whether manifest files should be isolated as well—I should read more carefully. :-)I’d lean towards “no”, because like you wrote, manifests can be and often are more advanced than just lists of package names.Conversely, channel files are almost always trivial, with ‘channel-with-substitutes-available’ being perhaps the only attempt to program channel files (but it is little used AFAIK).
       
 (DIR) Post #B6E5WfNNyIUCmXj4YC by jfred@jawns.club
       0 likes, 0 repeats
       
       @civodul But you might not trust the packages provided by a channel! Or at least, you might not trust them with the full authority of your user account. You might be installing them with the intention of sandboxing them as well.
       
 (DIR) Post #B6EU7cRMFQpvI5jlei by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @jfred True.  And that too is missing: running programs in a least-authority environment (you can kinda do that with ‘guix shell -C’ but finding the right set of options is tedious).
       
 (DIR) Post #B6EURdOQPos42MuRsW by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @jfred Actually it’s almost there: https://issues.guix.gnu.org/75595
       
 (DIR) Post #B6EV6tSnZQHvkgd3po by zimoun@sciences.re
       0 likes, 1 repeats
       
       @civodul My favorite quote from the post resuming the today’s computing world:« […] and many more are all about deploying software of unknown origin like there’s no tomorrow. »
       
 (DIR) Post #B6EVO7JrJ9ixeEf0Ay by civodul@toot.aquilenet.fr
       0 likes, 0 repeats
       
       @khinsen Yeah, this is one of the option that was discussed.Regarding ‘channel-with-substitutes-available’, WDYT of the alternative option?https://guix.gnu.org/manual/devel/en/html_node/Channels-with-Substitutes.html@zimoun
       
 (DIR) Post #B6EqVySgDrw3WwNGL2 by jfred@jawns.club
       0 likes, 0 repeats
       
       @civodul Oh interesting! I might have to spend some time trying to understand both that isolated inferior code and the Cuirass isolation code