From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Re: [Nix-dev] /dev/shm inconsistency in chroot Date: Fri, 24 Jan 2014 12:13:21 -0500 Message-ID: <87sisdi9qm.fsf@netris.org> References: <52E16BC1.6050908@totakura.in> <8738kelbfe.fsf@netris.org> <52E23D95.5050307@totakura.in> <52E274DC.6070009@shealevy.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50740) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W6kMR-0005Ph-LE for guix-devel@gnu.org; Fri, 24 Jan 2014 12:16:13 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1W6kML-0005Is-M2 for guix-devel@gnu.org; Fri, 24 Jan 2014 12:16:07 -0500 Received: from world.peace.net ([96.39.62.75]:60200) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W6kML-0005Ij-Ij for guix-devel@gnu.org; Fri, 24 Jan 2014 12:16:01 -0500 In-Reply-To: <52E274DC.6070009@shealevy.com> (Shea Levy's message of "Fri, 24 Jan 2014 09:12:44 -0500") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Shea Levy Cc: guix-devel@gnu.org, nix-dev@lists.science.uu.nl Shea Levy writes: > On 01/24/2014 05:16 AM, Sree Harsha Totakura wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> On 01/23/2014 08:56 PM, Mark H Weaver wrote: >>> We should not inherit /dev from the host system at all, but rather >>> create it from scratch with just the things we need. IMO, that's >>> the only truly proper solution. >> We can try creating a fixed set of device nodes, for example: >> /dev/null, /dev/random, /dev/urandom, /dev/sda etc. Has anyone tried >> this before? > > Another option is to mount a devtmpfs there, for systems which support it. The thing is, we don't actually want most of the system's devices to be in the build environment, do we? These are all impurities. I don't think we want /dev/sda, for example. Mark