Post #2870224
2026-05-12 16:33 UTC
@civodul@toot.aquilenet.fr But you might not trust the packages provided by a channel! Or at least, you might not trust them with the full authority of your user account. You might be installing them with the intention of sandboxing them as well.
Replies (2)
-
@ryanprior@mastodon.social 2026-05-12 18:39
@jfred@jawns.club @civodul@toot.aquilenet.fr this is exactly my concern as well. If a package is destined for a locked down container (or VM) then the whole channel would be better off similarly locked down.
-
@civodul@toot.aquilenet.fr 2026-05-12 21:08
@jfred@jawns.club True. And that too is missing: running programs in a least-authority environment (you can kinda do that with ‘guix shell -C’ but finding the right set of options is tedious).