I’m thinking of setting up multi user nix on a compute cluster. The advantage would be to have a shared storage where common packages are reused, this is a great advantage compared to conda where every environment duplicates storage and inodes.
However, the packages are installed as root. As such I’m a bit wary of whether a user installing something could have the system run malware as root by installing a package.
What are the safeguards in place and how do I know I can trust them?
https://en.wikipedia.org/wiki/Nix_(package_manager)
What’s your point? Nix is meant for CI, but even still the defaults are set for multi-user operations.
Nix is absolutely not just for CI, the idea is to use it locally as well, so the CI runs in the same environment.