Hi, Rutherther <[email protected]> skribis:
> I wanted to ask about what happens after pulls.ci.guix.gnu.org builds > something, in terms of substitutability for the users. Nothing. :-) For now, for security reasons, pulls.ci is completely isolated so whatever it builds is lost. This could be fixed when pulls.ci is upgraded to the yet-to-be-released Cuirass 1.4.0 since that one adds isolation around evaluations. > But apart from that I also noticed that there is an update to libgit2, > seemingly only in a PR and seemingly only pulls.ci.guix.gnu.org that > built it... and it is... substitutable through ci.guix.gnu.org. Yes, this is thanks to <https://ci.guix.gnu.org/jobset/security-updates>, which builds ‘etc/manifests/upgrade.scm’: https://lists.gnu.org/archive/html/guix-devel/2024-12/msg00011.html Thanks, Ludo’.
