Open
Description
There are numerous performance improvements that this could entail:
- No need to initialize the nix repository upon insantiation of the container for the first times
- Fewer checks each time the container is started (at least, I think so).
- Packages could be shared between users on the VM, but this requires nix be installed with setuid accordingly - probably the standard nix installer handles this, but am unsure - certainly it is handled appropriately in NixOS
- No need to use a beefy overlay image (may not need overlay at all).
Of course, there are some places where this won't work:
- Where we don't control the nodes - e.g., Stampede or other large HPC systems. We can't mess with setuid there.
- Where we really want to provide image snapshots for ultimate reproducibility (still, this comes in pairs: the base image and the overlay image).