|
|
| (2 intermediate revisions by 2 users not shown) |
| Line 1: |
Line 1: |
| 当沙盒构建被启用时, Nix会为每一个构建进程设置一个孤立的环境.It is used to remove further hidden dependencies set by the build environment to improve reproducibility. This includes access to the network during the build outside of <code>fetch*</code> functions and files outside the Nix store. Depending on the operating system access to other resources are blocked as well (ex. inter process communication is isolated on Linux); see [https://nixos.org/nix/manual/#sec-conf-file nix.conf section] in the Nix manual for details.
| | 启用沙盒构建后，Nix 将为每个构建过程设置一个隔离环境。这用于移除构建环境中的的其它隐藏依赖项，以提高构建结果的可复现性。这包括在构建过程中对 <code>fetch*</code> 函数之外的网络访问，以及对 Nix Store 之外的文件访问的不可行。根据操作系统的不同，对其他资源的访问也会被阻止（例如，在 Linux 上，进程间通信也是被隔离的）。 |