From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: [Nix-dev] /dev/shm inconsistency in chroot Date: Fri, 21 Mar 2014 10:01:44 +0100 Message-ID: <8761n89b7r.fsf@gnu.org> References: <52E16BC1.6050908@totakura.in> <8738kelbfe.fsf@netris.org> <52E23D95.5050307@totakura.in> <52E274DC.6070009@shealevy.com> <87sisdi9qm.fsf@netris.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39603) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WQvKo-00077a-QK for guix-devel@gnu.org; Fri, 21 Mar 2014 05:01:55 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WQvKk-0000fb-8g for guix-devel@gnu.org; Fri, 21 Mar 2014 05:01:50 -0400 Received: from hera.aquilenet.fr ([2a01:474::1]:43096) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WQvKk-0000fV-2L for guix-devel@gnu.org; Fri, 21 Mar 2014 05:01:46 -0400 In-Reply-To: <87sisdi9qm.fsf@netris.org> (Mark H. Weaver's message of "Fri, 24 Jan 2014 12:13:21 -0500") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Mark H Weaver Cc: guix-devel@gnu.org Mark H Weaver skribis: > Shea Levy writes: > >> On 01/24/2014 05:16 AM, Sree Harsha Totakura wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> >>> On 01/23/2014 08:56 PM, Mark H Weaver wrote: >>>> We should not inherit /dev from the host system at all, but rather >>>> create it from scratch with just the things we need. IMO, that's >>>> the only truly proper solution. >>> We can try creating a fixed set of device nodes, for example: >>> /dev/null, /dev/random, /dev/urandom, /dev/sda etc. Has anyone tried >>> this before? >> >> Another option is to mount a devtmpfs there, for systems which support = it. > > The thing is, we don't actually want most of the system's devices to be > in the build environment, do we? These are all impurities. I don't > think we want /dev/sda, for example. For the record, with , the daemon creates /dev deterministically. (This change landed in guix-daemon with the latest =E2=80=98nix-upstream=E2=80=99 update.) Ludo=E2=80=99.