Skip to content

Conversation

@Mic92
Copy link
Member

@Mic92 Mic92 commented Oct 18, 2025

Description
Checklist
  • Formatted with cargo fmt
  • Built with nix build
  • Ran flake checks with nix flake check
  • Added or updated relevant tests (leave unchecked if not applicable)
  • Added or updated relevant documentation (leave unchecked if not applicable)
  • Linked to related issues (leave unchecked if not applicable)

grahamc and others added 30 commits October 31, 2024 12:03
* flake.lock: Update

Flake lock file updates:

• Updated input 'determinate':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.136%2Brev-ec5f982bd53acbece1c3a72a0dbf074ab5d79e10/019244a6-0aa7-72b5-9d85-a7bb7885aad3/source.tar.gz?narHash=sha256-sSGQJP7isahkRAzlOiLJjvoz/MijCsoFa6FgQIqbcFE%3D' (2024-09-30)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.145%2Brev-5babe9d6a9eb52ee001bf70ad607fd66522f781b/0192b11b-c96e-7199-ba89-8c923541fcce/source.tar.gz?narHash=sha256-%2BjP%2BZlg0prpcmBy5s7cPUa7nJr90Zm2m933aibrHBYw%3D' (2024-10-21)
• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.687049%2Brev-06cf0e1da4208d3766d898b7fdab6513366d45b9/019243b7-0a9f-79f7-b57a-4e0cfd13a578/source.tar.gz?narHash=sha256-S5kVU7U82LfpEukbn/ihcyNt2%2BEvG7Z5unsKW9H/yFA%3D' (2024-09-29)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.696981%2Brev-18536bf04cd71abd345f9579158841376fdd0c5a/0192cc00-028d-731c-91e9-e50f0dd89c03/source.tar.gz?narHash=sha256-RP%2BOQ6koQQLX5nw0NmcDrzvGL8HDLnyXt/jHhL1jwjM%3D' (2024-10-25)

* Cargo updates

* set the version to v0.27.1

* Bump nix to 2.24.10

* flake.lock: Update

Flake lock file updates:

• Updated input 'nix':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/nix/2.24.9/0192358e-86eb-7a95-8161-99d09d9a6a06/source.tar.gz?narHash=sha256-1mUkLxoyG/rgceHeJTXcKcySvw5dSzIvAtqd1vaoa1g%3D' (2024-09-27)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/nix/2.24.10/0192e251-cc5a-7b3c-8339-faf088a24136/source.tar.gz?narHash=sha256-y1z53C9%2ByH1LUCWuouuA0i4vzXEAm8bmK0gyNAY/fyc%3D' (2024-10-31)
• Updated input 'nix/nix':
    'https://api.flakehub.com/f/pinned/NixOS/nix/2.24.9/01923584-fceb-7a8c-bef7-f6d1eb9a0916/source.tar.gz?narHash=sha256-OwJByTdCz1t91ysBqynK%2BifszkoIGEXUn6HE2t82%2Bc8%3D' (2024-09-27)
  → 'https://api.flakehub.com/f/pinned/NixOS/nix/2.24.10/0192e247-90bb-7e27-ba8d-f7ee8344a03e/source.tar.gz?narHash=sha256-XdeVy1/d6DEIYb3nOA6JIYF4fwMKNxtwJMgT3pHi%2Bko%3D' (2024-10-30)
• Updated input 'nix/nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.2405.635457%2Brev-759537f06e6999e141588ff1c9be7f3a5c060106/01922cec-c9c8-788e-8861-26f19bd8d7aa/source.tar.gz?narHash=sha256-KQPI8CTTnB9CrJ7LrmLC4VWbKZfljEPBXOFGZFRpxao%3D' (2024-09-25)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.2405.636213%2Brev-64b80bfb316b57cdb8919a9110ef63393d74382a/0192d84c-b6fc-7e39-a326-c46cc00f5b6a/source.tar.gz?narHash=sha256-9z8oOgFZiaguj%2Bbbi3k4QhAD6JabWrnv7fscC/mt0KE%3D' (2024-10-28)
• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.696981%2Brev-18536bf04cd71abd345f9579158841376fdd0c5a/0192cc00-028d-731c-91e9-e50f0dd89c03/source.tar.gz?narHash=sha256-RP%2BOQ6koQQLX5nw0NmcDrzvGL8HDLnyXt/jHhL1jwjM%3D' (2024-10-25)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.698755%2Brev-807e9154dcb16384b1b765ebe9cd2bba2ac287fd/0192e144-1d3e-76b9-af9e-0f71e483f976/source.tar.gz?narHash=sha256-l253w0XMT8nWHGXuXqyiIC/bMvh1VRszGXgdpQlfhvU%3D' (2024-10-29)
* ConfigureInitService: remove unnecessary `systemctl daemon-reload`

* ConfigureInitService: don't remove files that were already removed

* ConfigureDeterminateNixdInitService: remove unused error enum

* ConfigureInitService: don't check if units already exist

If they do, we'll replace them in the execute step anyways.

* ConfigureInitService: fixup tracing log line outside of guard

* fixup: rename restore_shell variable to repair

* ConfigureInitService: bootout failure is (probably) not fatal, just collect it and move on

* fixup: const-ify selinux policy path for FHS systems

* retry_bootout: use service identifier for bootout instead of path

Hopefully fixes the "Boot-out failed: 5: Input/output error" error on
all future installs.

* fixup: deduplicate service_name
…Systems#1277)

* EncryptApfsVolume: fix encryption detection, enable curing

* fixup: `launchctl print` does not take a `-plist` flag

* fixup: we always thought the service was started

The string "not running" contains "running", so we'd always set
`service_started = true;` here. That's wrong, so instead check for "does
not contain 'not running'".

This does open us up to thinking that anything that is not "not running"
is running, but we can address that later, if it becomes an issue.

Also I'm pretty sure we don't need this at all, since it's always "not
running" after it mounts the volume... But I'll leave that for later.

* BootstrapLaunchctlService: always run

* KickstartLaunchctlService: use execute_command helper

* fixup: get_uuid_for_label -> get_disk_info_for_label

For a follow-up commit.

* If a Nix Store volume already exists and is encrypted with FileVault, force `encrypt` to true

* fixup: check_loaded should not print to stdout/stderr, should use DARWIN_LAUNCHD_DOMAIN const

* fixup: cargo clippy

* fixup: check_loaded_output -> check_loaded

Even though the exit code is an output of running the program, it's not
textual output on stdout / stderr.

* fixup: make comment more readable
…installation flows (DeterminateSystems#1278)

* fixup: align ActionTag with serde and typetag tags

* Bump to 0.28.0, since receipt format changed due to misaligned serde / typetag tags

* fixup: make it possible to write receipts for anything serializable

* Leave TODO about existing macos volume services being different

* Remove determinate/upstream init service if it still exists

* Check that the GID of an existing /nix/store is the same GID as we're going to create / use

* fixup: make some fields pub(crate) for the upcoming split-receipt command

* fixup: reorganize imports

* Add `split-receipt` command that splits receipt into phase 1 and 2 uninstallation flows

* Remove phase 1 and 2 uninstall receipts if they exist upon a successful install

* Move split_receipt module into its own file

* fixup: cargo clippy

* fixup: extract "check existing nix store gid" into own function

* fixup: define roundtrip_to_extract_type outside of other function

* fixup: don't fail profile deserialization if UnknownProfileItem is missing fields

plist::Value does not implement Eq, so we need to wrap it in something
that does, I think, probably

* fixup: put uninstall phase1 command on new line

* Update fixtures

* fixup: split_receipt: split match expression to separate let

* fixup: roundtrip_to_exact_type: use type_name instead of manually passing action_tag

---------

Co-authored-by: Cole Mickens <[email protected]>
* Pin back nixpkgs

* flake.lock: Update

Flake lock file updates:

• Updated input 'determinate':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.145%2Brev-5babe9d6a9eb52ee001bf70ad607fd66522f781b/0192b11b-c96e-7199-ba89-8c923541fcce/source.tar.gz?narHash=sha256-%2BjP%2BZlg0prpcmBy5s7cPUa7nJr90Zm2m933aibrHBYw%3D' (2024-10-21)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.153%2Brev-e8698104b97ce6bce0ce6bbd46d82dccabfffd1d/01932265-56de-748a-a97e-9e8bfaab53a2/source.tar.gz?narHash=sha256-uNxfr/i8m9oyMPUxlagmOm%2BqQ4erUB0Pq2sRtR4qFV4%3D' (2024-11-12)
• Updated input 'determinate/determinate-nixd-aarch64-darwin':
    'https://install.determinate.systems/determinate-nixd/rev/51ecec5a3148baef87c2015536aa12dd18e4c4ad/macOS?narHash=sha256-OhG8joS/uN3Kdw4h9w8F/6ZIVTFZ8J9Fb4NGn/KK5/s%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.2/macOS?narHash=sha256-XSYDoC2gHke98y83pABOnNT0E2jGE0qo1yBzY0b7/I0%3D'
• Updated input 'determinate/determinate-nixd-aarch64-linux':
    'https://install.determinate.systems/determinate-nixd/rev/51ecec5a3148baef87c2015536aa12dd18e4c4ad/aarch64-linux?narHash=sha256-AGcHQSIdb%2BKEJlhJzMB4YyFxbjdLZEDDf6bv6Zi3wqM%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.2/aarch64-linux?narHash=sha256-MfKT7oYAZ1BxVpsFA4SRNYxh%2B2fQScESO67UJy%2B8gQY%3D'
• Updated input 'determinate/determinate-nixd-x86_64-linux':
    'https://install.determinate.systems/determinate-nixd/rev/51ecec5a3148baef87c2015536aa12dd18e4c4ad/x86_64-linux?narHash=sha256-kU4dqHoYe3sFf4LDAUj4fyl9uGV8IHtE22%2BDdMeRN0s%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.2/x86_64-linux?narHash=sha256-N6ufU3p/8ooUsElSmPTArgfqCWj0emuDdLgkCFZ1ksE%3D'
• Updated input 'fenix':
    'https://api.flakehub.com/f/pinned/nix-community/fenix/0.1.2029%2Brev-a9d2e5fa8d77af05240230c9569bbbddd28ccfaf/01924729-44b5-7df4-a70d-d5e64656e243/source.tar.gz?narHash=sha256-tvN9v5gTxLI5zOKsNvYl1aUxIitHm8Nj3vKdXNfJo50%3D' (2024-10-01)
  → 'https://api.flakehub.com/f/pinned/nix-community/fenix/0.1.2064%2Brev-87b4d20f896c99018dde4702a9c6157b516f2a76/0192e6cd-971b-78c1-896b-bd0e33f2c68f/source.tar.gz?narHash=sha256-U1DWb5c3EfkA7pqx5V1H4AWRA%2BEaE6UJ0lIRvK1RxgM%3D' (2024-11-01)
• Updated input 'fenix/rust-analyzer-src':
    'github:rust-lang/rust-analyzer/28830ff2f1158ee92f4852ef3ec35af0935d1562?narHash=sha256-xxgUHwwJ%2B1xQQoUWvLDo807IZ0MDldkfr9N1G4fvNJU%3D' (2024-09-30)
  → 'github:rust-lang/rust-analyzer/0ba893e1a00d92557ac91efb771d72eee36ca687?narHash=sha256-0Uq%2B/B8eu7pw8B8pxuGdFYKjcVLwNMcHfDxU9sXh7rg%3D' (2024-10-31)

* Update cargo deps
* /etc/nix.conf nit

* link to dnixd

* ConfigureNix: don't use try_join! macro

We can run them sequentially, no problem.

* Allow skipping placing the nix.conf

* fixup: use remove_* wrappers, allow ignoring nonexistent files

---------

Co-authored-by: Graham Christensen <[email protected]>
… nits and cleanup (DeterminateSystems#1299)

* Don't fail to delete a macos user that doesn't exist

* Deduplicate the diskutil info collection

* Don't unmount the Nix volume if it is already the correct volume, mounted at the correct place

* Fixup clippy

* Don't panic if the nix store doesn't exist yet, duh

* Only skip the unmount step if the create volume was already completed

* Centralize the 'skip-if-mounted' logic and apply it to create_nix_volume too

* Don't have the /nix path configurable at the moment

* Use the skipped helper
* flake.lock: Update

Flake lock file updates:

• Updated input 'determinate':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.153%2Brev-e8698104b97ce6bce0ce6bbd46d82dccabfffd1d/01932265-56de-748a-a97e-9e8bfaab53a2/source.tar.gz?narHash=sha256-uNxfr/i8m9oyMPUxlagmOm%2BqQ4erUB0Pq2sRtR4qFV4%3D' (2024-11-12)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.156%2Brev-15b053d78de610810a303afec9ce3e0160bd8c69/019345d8-fd8d-7c5f-b852-f9eace9b13f5/source.tar.gz?narHash=sha256-Ul9NJss1/eyGTE9c7bBJjN1%2B38A75ojGqDZHQEvsmVo%3D' (2024-11-19)
• Updated input 'determinate/determinate-nixd-aarch64-darwin':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.2/macOS?narHash=sha256-XSYDoC2gHke98y83pABOnNT0E2jGE0qo1yBzY0b7/I0%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.3/macOS?narHash=sha256-oUDHY3Ty9aYOHOoSPRFZRut87iqJy8uKMgv3SDxMTXY%3D'
• Updated input 'determinate/determinate-nixd-aarch64-linux':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.2/aarch64-linux?narHash=sha256-MfKT7oYAZ1BxVpsFA4SRNYxh%2B2fQScESO67UJy%2B8gQY%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.3/aarch64-linux?narHash=sha256-wtKTpTi6Nho1XutQjd96xgVnhoVD2CEMJQdygkUuwsk%3D'
• Updated input 'determinate/determinate-nixd-x86_64-linux':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.2/x86_64-linux?narHash=sha256-N6ufU3p/8ooUsElSmPTArgfqCWj0emuDdLgkCFZ1ksE%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.3/x86_64-linux?narHash=sha256-gSGNIHpmAPJgjks/Yb9PzwubPAbPULk9LEiDpdFZtpA%3D'

* 0.29.0
…rminateSystems#1306)

* CreateNixVolume: formatting nits

* CreateNixVolume: don't delete disk encryption password if volume deletion failed

* CreateDeterminateNixVolume: formatting nits

* CreateDeterminateNixVolume: don't delete disk encryption password if volume deletion failed
* cargo update --aggressive

* release v0.30.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'determinate':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.156%2Brev-15b053d78de610810a303afec9ce3e0160bd8c69/019345d8-fd8d-7c5f-b852-f9eace9b13f5/source.tar.gz?narHash=sha256-Ul9NJss1/eyGTE9c7bBJjN1%2B38A75ojGqDZHQEvsmVo%3D' (2024-11-19)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.159%2Brev-29b7b7dfb1c878267383aa91c357ef464bef0f0d/01935106-420e-7097-93f6-ef4f1b11ffde/source.tar.gz?narHash=sha256-tuqod7g%2B1%2BPvtUXUlLl4MwY9B%2Bgr4rAEOGvhmhtWLbE%3D' (2024-11-21)
• Updated input 'determinate/determinate-nixd-aarch64-darwin':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.3/macOS?narHash=sha256-oUDHY3Ty9aYOHOoSPRFZRut87iqJy8uKMgv3SDxMTXY%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.4/macOS?narHash=sha256-6E9DFC4lTpjmErG2TvV7rIS1tiyGZZYg0Kd4pT5GOkU%3D'
• Updated input 'determinate/determinate-nixd-aarch64-linux':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.3/aarch64-linux?narHash=sha256-wtKTpTi6Nho1XutQjd96xgVnhoVD2CEMJQdygkUuwsk%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.4/aarch64-linux?narHash=sha256-CnbFYAL7dAl8qBIvAFMVjW4KpQgmWlghnK3qfoLEP8Q%3D'
• Updated input 'determinate/determinate-nixd-x86_64-linux':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.3/x86_64-linux?narHash=sha256-gSGNIHpmAPJgjks/Yb9PzwubPAbPULk9LEiDpdFZtpA%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.4/x86_64-linux?narHash=sha256-0w3gbvncDwukX4PHVWeOZeD6F6vsEuePoNOIlAvdEq0%3D'
…1314)

* confirmation prompts: abort with unique messages

If an install is attempted, it fails near the end, and an uninstall is declined
by the user, state specifically that an uninstall was not done, don't report
that nothing was done.

Signed-off-by: Nicholas Sielicki <[email protected]>

* fixup: quit message

---------

Signed-off-by: Nicholas Sielicki <[email protected]>
Co-authored-by: Cole Helbling <[email protected]>
…teSystems#1319)

* fixup: unnnecessary clone

* FetchAndUnpackNix: remove destination if it already exists
* cargo update --aggressive

* Release v0.30.1
* Prep for release

* v0.30.2
* CreateUser: retry dscl command if it gets SIGKILLed

* AddUserToGroup: disambiguate between "group not found" and "user not found"

* AddUserToGroup: handle case where user and group both already exist

* fixup: bogus arg to dseditgroup

This has always been wrong:

     -t recordtype
              The type of the record to be added to or deleted from the group specified by groupname.
              Valid values are user, computer, group, or computergroup.

but I guess macOS just ignores / autodetects the correct type when
provided with a bogus value.

Validated by doing various operations with `-t jfkdlsjfkldasjl` and
seeing no errors, but passing the "wrong type", i.e. `-t group` in this
invocation, did error with "Record was not found".

* SetupDefaultProfile: prevent post-build-hook from messing nix-env up

...if it's configured, we'll skip it for the nix-env invocations.
* After unpacking Nix, regrp the store if its group isn't the new build-user-group.

* Update src/action/common/provision_nix.rs

* Use filter_map instead of filter, update the note about /nix/store dirents due to BSD behavior

* Reformat.

* discrepAncy
* flake.lock: Update

Flake lock file updates:

• Updated input 'fenix':
    'https://api.flakehub.com/f/pinned/nix-community/fenix/0.1.2064%2Brev-87b4d20f896c99018dde4702a9c6157b516f2a76/0192e6cd-971b-78c1-896b-bd0e33f2c68f/source.tar.gz?narHash=sha256-U1DWb5c3EfkA7pqx5V1H4AWRA%2BEaE6UJ0lIRvK1RxgM%3D' (2024-11-01)
  → 'https://api.flakehub.com/f/pinned/nix-community/fenix/0.1.2090%2Brev-a8a983027ca02b363dfc82fbe3f7d9548a8d3dce/0193814c-7c19-7c1a-a29e-27c7d7c19316/source.tar.gz?narHash=sha256-yKI1KiZ0%2BbvDvfPTQ1ZT3oP/nIu3jPYm4dnbRd6hYg4%3D' (2024-11-27)
• Updated input 'fenix/rust-analyzer-src':
    'github:rust-lang/rust-analyzer/0ba893e1a00d92557ac91efb771d72eee36ca687?narHash=sha256-0Uq%2B/B8eu7pw8B8pxuGdFYKjcVLwNMcHfDxU9sXh7rg%3D' (2024-10-31)
  → 'github:rust-lang/rust-analyzer/8d5e91c94f80c257ce6dbdfba7bd63a5e8a03fa6?narHash=sha256-7VKcoLug9nbAN2txqVksWHHJplqK9Ou8dXjIZAIYSGc%3D' (2024-11-26)

* cargo update --aggressive

* Release v0.31.0
* EncryptApfsVolume: retry mounting the disk more times

* EncryptApfsVolume: pass disk passphrase on stdin
* Increase retry verbosity to debug

* fixup: span name
It's been fixed in the Nixpkgs we use so, no need anymore.
…Systems#1337)

* Re-own /nix/var to 0:0, except for the per-user profiles

Some users are seeing installation failures because /nix/var has corrupted permissions.

* Clean up the comments.

* Don't adjust ownership in the gcroots subdir

* Apply suggestions from code review

Co-authored-by: Cole Helbling <[email protected]>

* Move the chowning / chgrping to CreateNixTree, and prevent C.N.T. from erroring on UID mismatch.

---------

Co-authored-by: Cole Helbling <[email protected]>
…rminateSystems#1338)

* Enable nosuid and noatime.

/nix should not contain suid/setgid binaries in general.
We don't need atime either.
At the time, I think we were wondering if nix-collect-garbage used atime.
It doesn't.

Having atime is a pretty big performance penalty, and macOS mounts most filesytems noatime already.

* Allow filter_map's that can just be .filter, since those are easier to read

* Move the "prelude" into a suffix, which makes writing and updating the fstab a much simpler operation.
  The fstab on macOS, where this is used, appears to handle a suffix comment just fine.
* Stop trying to detect foreign / native fstab entries.
* Generally, cut out a lot of opportunities for failure by implementing this as a straightforward filter and map.

* Make sure the fstab ends with a newline
* v0.32.0

* Dep updates

* flake.lock: Update

Flake lock file updates:

• Updated input 'determinate':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.159%2Brev-29b7b7dfb1c878267383aa91c357ef464bef0f0d/01935106-420e-7097-93f6-ef4f1b11ffde/source.tar.gz?narHash=sha256-tuqod7g%2B1%2BPvtUXUlLl4MwY9B%2Bgr4rAEOGvhmhtWLbE%3D' (2024-11-21)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/0.1.163%2Brev-65c2bebd71e0e92a34997030ca5408a7a0025379/01939872-fc76-7ade-bcd8-ca56d6311636/source.tar.gz?narHash=sha256-EZTAm9hVL2NIub5kdWb5k2BFMe%2BASiBvN7s20x/d6%2BU%3D' (2024-12-05)
• Updated input 'determinate/determinate-nixd-aarch64-darwin':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.4/macOS?narHash=sha256-6E9DFC4lTpjmErG2TvV7rIS1tiyGZZYg0Kd4pT5GOkU%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.5/macOS?narHash=sha256-FIQdKceChaoDlYYfIfoTiyRfmNyxp8%2BEXPzCg584uB4%3D'
• Updated input 'determinate/determinate-nixd-aarch64-linux':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.4/aarch64-linux?narHash=sha256-CnbFYAL7dAl8qBIvAFMVjW4KpQgmWlghnK3qfoLEP8Q%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.5/aarch64-linux?narHash=sha256-IPrjf/cntNxn1CKc1Z3SNsoxVw2iR%2BAKTzGR4UqfH%2BU%3D'
• Updated input 'determinate/determinate-nixd-x86_64-linux':
    'https://install.determinate.systems/determinate-nixd/tag/v0.2.4/x86_64-linux?narHash=sha256-0w3gbvncDwukX4PHVWeOZeD6F6vsEuePoNOIlAvdEq0%3D'
  → 'https://install.determinate.systems/determinate-nixd/tag/v0.2.5/x86_64-linux?narHash=sha256-NrWVnTNDkF31KXBcpPOoKksfapvkIH1M3sBQo3adNbY%3D'
• Updated input 'naersk':
    'github:nix-community/naersk/3fb418eaf352498f6b6c30592e3beb63df42ef11?narHash=sha256-r/xppY958gmZ4oTfLiHN0ZGuQ%2BRSTijDblVgVLFi1mw%3D' (2024-07-23)
  → 'github:nix-community/naersk/378614f37a6bee5a3f2ef4f825a73d948d3ae921?narHash=sha256-a4WZp1xQkrnA4BbnKrzJNr%2BdYoQr5Xneh2syJoddFyE%3D' (2024-12-04)

* nix 2.25.3

* flake.lock: Update

Flake lock file updates:

• Updated input 'nix':
    'https://api.flakehub.com/f/pinned/DeterminateSystems/nix/2.24.10/0192e251-cc5a-7b3c-8339-faf088a24136/source.tar.gz?narHash=sha256-y1z53C9%2ByH1LUCWuouuA0i4vzXEAm8bmK0gyNAY/fyc%3D' (2024-10-31)
  → 'https://api.flakehub.com/f/pinned/DeterminateSystems/nix/2.25.3/01939864-5191-788c-b898-163d916a3333/source.tar.gz?narHash=sha256-rOFE8TSwWoup%2BLPNbmtTs6oLy7lYZ12L9GN%2BaZuQQaA%3D' (2024-12-03)
• Updated input 'nix/nix':
    'https://api.flakehub.com/f/pinned/NixOS/nix/2.24.10/0192e247-90bb-7e27-ba8d-f7ee8344a03e/source.tar.gz?narHash=sha256-XdeVy1/d6DEIYb3nOA6JIYF4fwMKNxtwJMgT3pHi%2Bko%3D' (2024-10-30)
  → 'https://api.flakehub.com/f/pinned/NixOS/nix/2.25.3/01938786-bc70-79e3-b7ee-bb61f8e7f238/source.tar.gz?narHash=sha256-T%2BwFMm3cj8pGJSwXmPuxG5pz%2B1gRDJoToF9OBxtzocA%3D' (2024-11-29)
@Mic92 Mic92 force-pushed the update-from-upstream branch from 70f929b to 41d4ff1 Compare October 19, 2025 10:00
@Mic92 Mic92 force-pushed the update-from-upstream branch from eaccfdc to 49cca1c Compare October 19, 2025 10:31
Mic92 and others added 6 commits October 19, 2025 12:36
Add `-C target-feature=+crt-static` rustflag to ensure musl builds are
truly statically linked. Previously, the static binary still had
dynamic dependencies causing failures on Ubuntu.
magic-nix-cache no longer works on x86_64 macOS runners and the upload is slow.
@Mic92 Mic92 force-pushed the update-from-upstream branch from 7bc58b9 to 8aa4937 Compare November 21, 2025 20:40
@Mic92 Mic92 merged commit dcb47d7 into main Nov 21, 2025
11 checks passed
@Mic92 Mic92 deleted the update-from-upstream branch November 21, 2025 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.