lix/src
Jade Lovelace e3b702fa22 Actually try making a userns before assuming they don't work
If unprivileged userns are *believed* to be disabled (such as with
"kernel.unprivileged_userns_clone = 0"), Lix would previously *give up*
on trying to use a user namespace before actually trying it, even if, in
cases such as unprivileged_userns_clone, it would actually be allowed
since Nix has CAP_SYS_ADMIN when running as daemon.

(see, e.g. 25d4709a4f)

We changed it to actually try it first, and then diagnose possible
causes, and also to be more loud about the whole thing, using warnings
instead of debugs. These warnings will only print on the first build run
by the daemon, which is, tbh, eh, shrug.

This is what led to us realizing that no-userns was a poorly exercised
condition.

Change-Id: I8e4f21afc89c574020dc7e89a560cc740ce6573a
2024-05-05 00:37:24 +00:00
..
build-remote Remove HintFmt::operator% 2024-03-26 15:40:05 -07:00
libcmd nix3-profile: remove check "name" attr in manifests 2024-05-02 12:59:15 -06:00
libexpr Revert "Revert "Merge pull request #6621 from Kha/nested-follows"" 2024-05-03 22:54:38 +00:00
libfetchers remove extraneous cache entry from github fetcher 2024-04-21 10:46:05 +00:00
libmain meson: install pkg-config files for libraries 2024-03-29 02:45:48 +00:00
libstore Fix /etc/group having desynced IDs from the actual UID in the sandbox 2024-05-04 17:36:50 -07:00
libutil Actually try making a userns before assuming they don't work 2024-05-05 00:37:24 +00:00
nix Merge "Rename nix show-config to nix config show" into main 2024-05-03 22:07:33 +00:00
nix-build Move shell_words into its own file 2024-03-26 16:44:04 -07:00
nix-channel Format Nix code with nixfmt 2024-04-08 13:00:00 -07:00
nix-collect-garbage util.hh: split out signals stuff 2024-03-11 00:52:09 -07:00
nix-copy-closure Merge pull request #9277 from keszybz/file-permissions 2024-03-04 05:26:17 +01:00
nix-env refactor some nix-env and profile code to libcmd 2024-04-29 01:19:21 +00:00
nix-instantiate Unify and refactor value printing 2024-03-09 03:50:06 +01:00
nix-store libexpr: Support structured error classes 2024-03-09 04:47:05 -07:00
resolve-system-dependencies libutil: make AutoCloseFD a better resource 2024-03-18 15:42:52 -06:00
meson.build meson: implement functional tests 2024-03-27 18:37:50 -06:00