forked from lix-project/lix
44 lines
1.8 KiB
Markdown
44 lines
1.8 KiB
Markdown
# Release 2.12 (2022-12-06)
|
|
|
|
* On Linux, Nix can now run builds in a user namespace where they run
|
|
as root (UID 0) and have 65,536 UIDs available.
|
|
<!-- FIXME: move this to its own section about system features -->
|
|
This is primarily useful for running containers such as `systemd-nspawn`
|
|
inside a Nix build. For an example, see [`tests/systemd-nspawn/nix`][nspawn].
|
|
|
|
[nspawn]: https://github.com/NixOS/nix/blob/67bcb99700a0da1395fa063d7c6586740b304598/tests/systemd-nspawn.nix.
|
|
|
|
A build can enable this by setting the derivation attribute:
|
|
|
|
```
|
|
requiredSystemFeatures = [ "uid-range" ];
|
|
```
|
|
|
|
The `uid-range` [system feature] requires the [`auto-allocate-uids`]
|
|
setting to be enabled.
|
|
|
|
[system feature]: (../command-ref/conf-file.md#conf-system-features)
|
|
|
|
* Nix can now automatically pick UIDs for builds, removing the need to
|
|
create `nixbld*` user accounts. See [`auto-allocate-uids`].
|
|
|
|
[`auto-allocate-uids`]: (../command-ref/conf-file.md#conf-auto-allocate-uids)
|
|
|
|
* On Linux, Nix has experimental support for running builds inside a
|
|
cgroup. See
|
|
[`use-cgroups`](../command-ref/conf-file.md#conf-use-cgroups).
|
|
|
|
* `<nix/fetchurl.nix>` now accepts an additional argument `impure` which
|
|
defaults to `false`. If it is set to `true`, the `hash` and `sha256`
|
|
arguments will be ignored and the resulting derivation will have
|
|
`__impure` set to `true`, making it an impure derivation.
|
|
|
|
* If `builtins.readFile` is called on a file with context, then only
|
|
the parts of the context that appear in the content of the file are
|
|
retained. This avoids a lot of spurious errors where strings end up
|
|
having a context just because they are read from a store path
|
|
([#7260](https://github.com/NixOS/nix/pull/7260)).
|
|
|
|
* `nix build --json` now prints some statistics about top-level
|
|
derivations, such as CPU statistics when cgroups are enabled.
|