tilpner_ has joined #nix-lang
tilpner has quit [Ping timeout: 265 seconds]
tilpner_ is now known as tilpner
hmpffff has joined #nix-lang
ddellacosta has quit [Ping timeout: 246 seconds]
__monty__ has joined #nix-lang
<
MichaelRaskin>
puck: I think with a hash you would get better results, as the restricted mode is about reproducibility of eval as one of the goals
<
puck>
> builtins.fetchurl { url = "
https://example.com"; sha256 = "1nf895jf7dbrxarvdp3q6hj9p7jgyx8m43snac6rnn7vcmyar3za"; }
<
MichaelRaskin>
Are indeed you need to whitelist stuff via allowed-uris
<
MichaelRaskin>
nix-instantiate --eval-only -E 'builtins.fetchurl { url = "
https://example.com"; sha256 = "1nf895jf7dbrxarvdp3q6hj9p7jgyx8m43snac6rnn7vcmyar3za"; }' --option restrict-eval true --option allowed-uris 'https://'
<
MichaelRaskin>
The bot, naturally, does not want to be talked into downloading a few gigabytes, though
hmpffff has quit [Quit: nchrrrr…]
hmpffff has joined #nix-lang
hmpffff has quit [Quit: nchrrrr…]
ddellacosta has joined #nix-lang
hmpffff has joined #nix-lang
__monty__ has quit [Ping timeout: 272 seconds]
__monty__ has joined #nix-lang
__monty__ has quit [Ping timeout: 240 seconds]
__monty__ has joined #nix-lang
T0pH4t has joined #nix-lang
T0pH4t has quit [Quit: bye...]
hmpffff has quit [Quit: nchrrrr…]
hmpffff has joined #nix-lang
hmpffff has quit [Client Quit]
sphalerite has quit [Quit: WeeChat 2.6]
sphalerite has joined #nix-lang
__monty__ has quit [Quit: leaving]