6
submitted 18 hours ago by ranzispa@mander.xyz to c/linux@lemmy.ml

I'm thinking of setting up multi user nix on a compute cluster. The advantage would be to have a shared storage where common packages are reused, this is a great advantage compared to conda where every environment duplicates storage and inodes.

However, the packages are installed as root. As such I'm a bit wary of whether a user installing something could have the system run malware as root by installing a package.

What are the safeguards in place and how do I know I can trust them?

you are viewing a single comment's thread
view the rest of the comments
[-] ranzispa@mander.xyz 1 points 6 hours ago

Thank you, you reassured me quite a bit. I'll have a good read of the manual.

It is not really a build server, it's a compute server. I'll have users installing hundreds of different software packages, most of them using incompatible libraries and thus I was thinking of using Nix. Alternatives would be LMOD, which however requires the administrator to install very single piece of software, which... We don't really have a dedicated system administrator and I don't really want to go through the compilation instructions of every single piece of software we use. Alternatively everyone could compile their own software or install it through something like conda, but that eats up a lot of storage space since every library would be duplicated across users.

[-] balsoft@lemmy.ml 2 points 5 hours ago

Well, in that case remember to force everyone to use the same Nixpkgs version (otherwise you'll still end up with a lot of duplicated packages), and run nix-store --optimise; nix-collect-garbage -d regularly (ideally via cron or something).

this post was submitted on 01 Aug 2026
6 points (80.0% liked)

Linux

66753 readers
1198 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS