diff options
author | Rebecca Turner <rbt@sent.as> | 2024-03-27 10:16:16 -0700 |
---|---|---|
committer | Rebecca Turner <rbt@sent.as> | 2024-03-29 22:57:40 -0700 |
commit | 2a98ba8b97c9ff52519633c32cf63716827d6e7c (patch) | |
tree | 7b64c40ad064183cc7bc7afc662890ea567f2136 /doc/manual/src/release-notes/rl-1.1.md | |
parent | a4f5bb951dbc6fa4ffa2bb56376b38f38b6e9154 (diff) |
Add `pre-commit` checks
The big ones here are `trim-trailing-whitespace` and `end-of-file-fixer`
(which makes sure that every file ends with exactly one newline
character).
Change-Id: Idca73b640883188f068f9903e013cf0d82aa1123
Diffstat (limited to 'doc/manual/src/release-notes/rl-1.1.md')
-rw-r--r-- | doc/manual/src/release-notes/rl-1.1.md | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/doc/manual/src/release-notes/rl-1.1.md b/doc/manual/src/release-notes/rl-1.1.md index 1e658fe15..665dd92a2 100644 --- a/doc/manual/src/release-notes/rl-1.1.md +++ b/doc/manual/src/release-notes/rl-1.1.md @@ -5,26 +5,26 @@ This release has the following improvements: - On Linux, when doing a chroot build, Nix now uses various namespace features provided by the Linux kernel to improve build isolation. Namely: - + - The private network namespace ensures that builders cannot talk to the outside world (or vice versa): each build only sees a private loopback interface. This also means that two concurrent builds can listen on the same port (e.g. as part of a test) without conflicting with each other. - + - The PID namespace causes each build to start as PID 1. Processes outside of the chroot are not visible to those on the inside. On the other hand, processes inside the chroot *are* visible from the outside (though with different PIDs). - + - The IPC namespace prevents the builder from communicating with outside processes using SysV IPC mechanisms (shared memory, message queues, semaphores). It also ensures that all IPC objects are destroyed when the builder exits. - + - The UTS namespace ensures that builders see a hostname of `localhost` rather than the actual hostname. - + - The private mount namespace was already used by Nix to ensure that the bind-mounts used to set up the chroot are cleaned up automatically. |