diff --git a/doc/manual/release-notes.xml b/doc/manual/release-notes.xml index 3250c81a4b..66ced1c9c4 100644 --- a/doc/manual/release-notes.xml +++ b/doc/manual/release-notes.xml @@ -14,11 +14,25 @@ + + Builds in chroots are now executed in a private network + namespace, meaning that they do not see any network interfaces + except a private loopback interface. This ensures that builds + cannot communicate with processes outside of the chroot, or clash + with other builds by listening on an identical port number. + + + + Build logs are now compressed using + bzip2. The command nix-store + -l decompresses them on the fly. + + The creation of build logs in /nix/var/log/nix/drvs can be disabled by setting the new option build-keep-log to - false + false.