Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions INDEX.md
Original file line number Diff line number Diff line change
Expand Up @@ -98,6 +98,7 @@ Use update-index to regenerate it:

|Year|Title|Owners|
|----|-----|------|
| | [A unified configuration file and experience for the .NET SDK](proposed/dotnet-sdk-unified-config.md) | [Chet Husk](https://github.com/baronfel), [Daniel Plaisted](https://github.com/dsplaisted) |
| | [Add ability to embed install location options in apphost](proposed/apphost-embed-install-location.md) | |
| | [Provide SDK hint paths in global.json](proposed/local-sdk-global-json.md) | |
| | [Rate limits](proposed/rate-limit.md) | [John Luo](https://github.com/juntaoluo), [Sourabh Shirhatti](https://github.com/shirhatti) |
Expand Down
150 changes: 150 additions & 0 deletions proposed/dotnet-sdk-unified-config.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,150 @@
# A unified configuration file and experience for the .NET SDK

**Owner** [Chet Husk](https://github.com/baronfel) | [Daniel Plaisted](https://github.com/dsplaisted)

The .NET SDK is a product that consists of a number of different tools, all owned by different teams, all operating at slightly different levels of interaction. Some tools operate on the entire repository, some tools on a single project, and yet other tools on a single file.

Because of the disparate nature of these tools, the configuration for each tool is different. This makes it difficult for users to understand how to configure the tools, and difficult for the tools to share configuration information. This document proposes a single, centralized document for repository-wide configuration that tools belonging to the SDK (as well as SDK-adjacent 1st- and 3rd-party tools) can use to share configuration information in a way that has

* a consistent user experience
* a well supported IDE experience
* is shareable across team members and trackable in source control

## What exists today

Today there are several places where teams have put configuration for repo- or project-level configuration for tooling:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May or may not be relevant, but I'd also consider Directory.Build.rsp as another of these types of configuration sources.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similarly, we'll need guidance for when to put something here versus Directory.Build.props. For instance, where should I put TreatWarningsAsErrors? I think that has a surprisingly big impact for MSBuild, given that one's a default property and one's a global property.


* global.json files
* NuGet.config
* .config/dotnet-tools.json
* .runsettings (dotnet test)

In addition, several tools are only configurable via environment variables, which are not easily shareable or trackable in source control (due to the lack) of support for .env or other such conventions in the `dotnet` CLI.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Glad to see .env mentioned here. It may as well be a candidate if we are looking for something other than JSON or XML because of its simplicity and its ability to expand values dynamically from environment variables. Python, Docker Compose, Node.js (node --env-file new in v20) etc. ecosystems are using it with great success.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FWIW, corerun (the internal host for coreclr testing) also uses .env since dotnet/runtime@f3c705e, so using it right inside corehost won't be a problem either (if it comes to that).


All of these files and systems arose independently, have different formats, and the amount of tooling support for them varies significantly. We have 'shipped the org structure' in terms of our configuration.

## What is the need?

There are [several dotnet/sdk items](https://github.com/dotnet/sdk/issues?q=label%3Aconfig-system-candidate) where the concept of a unified configuration system would be beneficial. These include:

* expressing user behavioral preferences around build/pack/publish Configurations
* if binlogs should be made when performing builds
* the use or non-use of advanced terminal behaviors for build
* default verbosities for build/pack/publish
* custom aliases for CLI commands
* unified opt-out of telemetry
* storing tooling decisions like which mode `dotnet test` should execute in

All kinds of repository-wide configuration need a unified place to be expressed that we lack today.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be better to extend global.json instead of introducing yet another file?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Worth having the conversation, but global.json first and foremost belongs to the runtime today. I'd like to have something that tooling can work with that has guaranteed zero impact on runtime scenarios.

There is a bit of https://xkcd.com/927/ in this proposal, though.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

global.json first and foremost belongs to the runtime today

From my point of view, global.json belongs to the SDK. There is a tiny bit of code in in dotnet/runtime that reads it to find the version of SDK to call. This code only ever runs when dotnet is used to invoke SDK.

Also, different parts of SDK or SDK extensions have started to use global.json to store random configuration. Check what's in global.json in the dotnet/sdk repo: https://github.com/dotnet/sdk/blob/main/global.json


## Proposal

I propose that we create a new, repo-level configuration file that will be consumed by `dotnet` and `dotnet`-related tooling to provide a unified configuration experience. This file will be called `poohbear.config`[^1] and will be located at the root of the repository.

### Composition and heirarchy

This file will be hierarchical in a very limited fashion. The final realized configuration will be the result of merging the `poohbear.config` file in the repository root with an optional `poohbear.config` file in the user's `$HOME` directory (specifically, the SpecialFolders.UserProfile location in the .NET BCL). This will allow users to set defaults for their own use, and then override those defaults on a per-repository basis for sharing with coworkers.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Somewhat silly question for me, but how do you know what the repository root is? Are you searching up for the first you find? What if they nest?

Possible options:

  • Allow nesting similar to .editorconfig, optionally with an is_root style property
  • Find the first; if so, what if the first found isn't in $HOME but is "above" the .git folder?
  • Something else?

git config doesn't have these problems because you never actually interact with the file; here it's visible to the user (which is good) but that means you can and will end up with every combination possible :)

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As ubiquitous as Git is these days surely there are still customers that don't use Git. Why wouldn't the hierarchy follow the similar pattern of global.json and look for a file up the parent directory till you find a file or reach the root. And of course take into account the $HOME directory.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not everything is a (git) repository either:

dotnet new myapp
echo "answer = 42" > poohbear.config
# poohbear.config doesn't work???

IMHO it would make more sense to just walk up the directory hierarchy.


### Nested keys

We should encourage tools to stake a claim on a top-level 'namespace' for keys in this configuration file. Keys should either be namespaced with the tool's name or be namespaced with a common prefix that is unique to the tool. This will prevent key collisions between tools and make it easier for users to understand what each key does. This allows for the format to be open to extensibility, as new tools can add their own keys without fear of collision.
Copy link
Member

@MattKotsenas MattKotsenas Jan 31, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider from the outset some type of namespace or "vendor" prefix, even if it's just guidance without code enforcement. I get the point of not wanting to appear to privilege our own tools over 3rd parties, however I'm also sensitive to the risk of picking suboptimal names to avoid backwards incompatibility or collisions at the top-level.


### File format

>[!NOTE]
> This is going to be a bike-shedding point. Please try to focus first on the use cases and tool-level use, and then we can discuss the file format.

The `poohbear.config` file should be parseable by tooling and pleasant to read and edit by users.

The choice of format is in some ways limited by engineering considerations. The easiest thing would be to choose a format that is already supported by the BCL, which would lead us to JSON, XML, or INI. JSON and XML formats have downsides, though: JSON doesn't support comments and has an anemic data model, and XML is historically verbose and difficult to parse in a consistent way.

The recent wave of programming languages and programming-related tools have popularized the use of more human-readable formats like YAML, TOML, and INI. These formats are more human-readable and have more expressive power than JSON or XML. None of them have parsers in the BCL, though, which would mean that we would have to write our own parser or use a third-party library. Writing a parser is a potentially error-prone task, and using a third-party library would require onboarding the parser to source build as well as doing a thorough security audit. YAML specifically has such a lax parser that it might be a security risk to use it.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add KDL

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was going to suggest KDL, it's so good

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wow uhhh yeah that would be awesome.

fwiw, KDL might be standardizing officially with Ecma going forward. It would also be VERY easy to map msbuild concepts to it (see this translated csproj example).

It’s worth noting that KDL was created specifically because I ended up not wanting to use TOML as a configuration file. Some reasons being practical (like the difficulty with nesting and how strict the formatting needs are), and others being ideological (I just do not want to touch things so closely associated with that author, a sentiment many in my circles share).

Going from there, KDL was very carefully designed to bring in a lot of the practicality that people want from YAML with much more safety. In all but a few rare cases with specific Unicode shenanigans (for example, certain invisible spaces that Unicode specifically requires not be treated as spaces), a KDL document will be exactly what it seems to be to a human reader with any given editor.

Anyway I’m more than happy to answer questions about it, its tooling and adoption status, impressions from existing tools that use it for configuration, and even do some porting of example configs to show off potential benefits of KDL-specific features. You can also reach me internally, although I’m OOF until mid-March right now.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚲🏠: As already referenced in another comment, my only concern here is that within .NET I've never had to use TOML before, so by using it we're adding a new format/standard for users to learn here if they haven't previously had exposure to it.

Whatever the eventual choice, the addition of the git/npm-like ability to get and set the configuration is a great mitigation for this as users can leverage the CLI itself to query-set values in any automation they already have without having to add additional tooling/knowledge to be able to interact with it (e.g. using jq to read JSON).


My personal suggestion is that we should use [TOML][toml] and advocate for a parser for it in the BCL. TOML is in wide use in the [Python][python-why-toml] and Rust ecosystems. It strikes a good balance between human-readability and expressiveness. The [toml spec][toml-spec] includes a [comparison][toml-comparison] between TOML and other formats.

### Tooling support

#### CLI command
CLI commands (dotnet config) a la `git config` will be provided to allow users to set and get configuration values. This will allow users to set configuration values without having to edit the file directly. We should allow reading of configuration values via a CLI command to provide a least-common-denominator access mechanism.

`dotnet config get <key> [--local|--global]`

For example, to get the 'realized' value of the `dotnet.telemetry` key for a given repo, you could run the following command in that repo:
```shell
> dotnet config get dotnet.telemetry
true
```
and the following command would get the user-global value only
```shell
> dotnet config get dotnet.telemetry --global
false
```

The [git config][git-config] command is a good source of inspiration.


#### Programmatic access
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A different type of programmatic access, but should this file be available to Roslyn as well? For instance, should it be a goal, non-goal, etc. to allow something like stylecop.json or BannedSymbols.txt to be here instead?


We (BCL) should provide a library to parse the file and integrate its data into `Microsoft.Extensions.Configuration` so that tools can easily consume the configuration data.

#### IDE onboarding

We must ensure that both the CLI and VS support the configuration file and the configuration system.

#### Usage within the dotnet CLI and supporting tools
Inside the `dotnet` CLI (and tools that ship within the CLI), we will initialize a `ConfigurationBuilder` with the `poohbear.config` file and merge it with the user's `poohbear.config` file. We will also seed that builder with environment variables. Tools that need the configuration within the `dotnet` CLI will read the appropriate values and apply them to their execution.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the tool / format starts to support env vars or other sources, consider adding a dotnet config dump or dotnet config get --all command or similar so that folks can debug setup issues.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Listing the config files in effect as part of dotnet --info would also be nice.


### Secondary goals

Because the configuration file will be read into a Microsoft.Extensions.Configuration context, this opens up the possibility for environment variables to be implicitly defined for all configuration keys. This would allow users to set configuration values via environment variables, which is a common pattern and an improvement from the mismatched support for environment variables that we have today.

### Future work

With adoption, we could soft-deprecate some of the sources of standalone configuration mentioned above. Each configuration file could migrate to one or more namespaced keys in the `poohbear.config` file. For example, .NET SDK tools could live in a `dotnet.tools.<toolid>` namespace that listed the tools and any tool-specific configuration.

```toml
[dotnet.tools.dotnet-ef]
version = "9.0.1"

[dotnet.tools.fsautocomplete]
version = "0.75.0"
roll-forward = true
```

### Non-goals

We do not aim to replace solutions with this config file.

We do not aim to provide 'build configurations' - descriptions of projects to build and properties to apply to that build.

### Suggested configuration keys/namespaces for v1

> TBD, perhaps as part of discussion

* dotnet
* settings related to cross-cutting dotnet cli behaviors: telemetry, CLI aliases, etc
* test
* settings related to the behavior of `dotnet test`

### Prior art

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Love the prior art of cargo/rust. Maybe consider python and python + cargo too! PEP 518/621

pyproject.toml is great and used in poetry and uv (pyproject.toml or uv.toml)

https://peps.python.org/pep-0518/ (you already note this)

https://peps.python.org/pep-0621/ (another one regarding it)

NuGet/Home#13848 (my inspiration for doing this in NuGet)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

while the unified SDK config proposal is focused on tool configuration and not project metadata, I’m curious if there’s future thinking around combining both, similar to the approach taken in Python’s pyproject.toml, Rust’s Cargo.toml, or other modern ecosystems.

Is there interest in evolving toward a single file that serves as both project and tool configuration for .NET?


The most direct analogue to this is perhaps the [Cargo .config file][cargo-config]. This file doesn't contain any data about the project(s) being built, but instead contains configuration data for the `cargo` tool itself. Some use cases supported by this file include:

* command aliases
* flags that control the behavior of 'cargo build'
* authentication/credential provider configuration
* behavior flags for specific cargo subcommands (e.g. what version control to use when creating a new project)
* http client behaviors
* dependency resolver behaviors
* console output behaviors

All of these have parallels in the dotnet CLI and tools that ship with the SDK.

[cargo-config]: https://doc.rust-lang.org/cargo/reference/config.html#configuration-format
[git-config]: https://git-scm.com/docs/git-config
[python-why-toml]: https://peps.python.org/pep-0518/#other-file-formats
[toml-comparison]: https://github.com/toml-lang/toml?tab=readme-ov-file#comparison-with-other-formats
[toml-spec]: https://toml.io/en/v1.0.0
[toml]: https://toml.io

[^1]: Name is a placeholder, and will be replaced with a more appropriate name before implementation. A final name might change the extension to represent the file type chosen.