maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(default.nix): drop usersFilter

Browse source 
There's no //users anymore.

Change-Id: If43427a3c21d272b698559dbc39c16404682bb8b
Reviewed-on: https://cl.snix.dev/c/snix/+/30166
Tested-by: besadii
Reviewed-by: Ryan Lahfa <masterancpp@gmail.com>
Autosubmit: Florian Klink <flokli@flokli.de>
This commit is contained in:
Florian Klink 2025-03-20 00:09:42 +00:00 • committed by clbot
parent 3bd4674179
commit 1e45aee266
1 changed files with 0 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

27
default.nix
View file

@ -13,36 +13,9 @@
let let
readTree = import ./nix/readTree { }; readTree = import ./nix/readTree { };
# Disallow access to //users from other depot parts.
usersFilter = readTree.restrictFolder {
folder = "users";
reason = ''
Code under //users is not considered stable or dependable in the
wider depot context. If a project under //users is required by
something else, please move it to a different depot path.
'';
exceptions = [
# machines is allowed to access //users for several reasons:
#
# 1. User SSH keys are set in //users.
# 2. Some personal websites or demo projects are served from it.
[ "ops" "machines" "gerrit01" ]
[ "ops" "machines" "public01" ]
[ "ops" "machines" "build01" ]
[ "ops" "machines" "meta01" ]
# Due to evaluation order this also affects these targets.
# TODO(tazjin): Can this one be removed somehow?
[ "ops" "nixos" ]
[ "ops" "machines" "all-systems" ]
];
};
readDepot = depotArgs: readTree { readDepot = depotArgs: readTree {
args = depotArgs; args = depotArgs;
path = ./.; path = ./.;
filter = parts: args: usersFilter parts args;
scopedArgs = { scopedArgs = {
# FIXME(Lix): this cannot work in Lix itself. # FIXME(Lix): this cannot work in Lix itself.
# __findFile = _: _: throw "Do not import from NIX_PATH in the depot!"; # __findFile = _: _: throw "Do not import from NIX_PATH in the depot!";