Difference between revisions of "How to fetch Nixpkgs with an empty NIX PATH"

From NixOS Wiki
Jump to: navigation, search
(Make fetchNixpkgs use a fixed-output nixpkgs derivation and use the outputSha256 hash for builtins.fetchTarball; additionally, use if then else instead)
m (rollback unauthorized mass edits)
Tag: Rollback
 
(7 intermediate revisions by 3 users not shown)
Line 1: Line 1:
This recipe provides a way to fetch Nixpkgs with an empty <code>NIX_PATH</code>.  This
+
You can fetch Nixpkgs with an empty <code>NIX_PATH</code>.  This
 
comes in handy if you want to remove impure references to the <code>NIX_PATH</code> from
 
comes in handy if you want to remove impure references to the <code>NIX_PATH</code> from
your code base
+
your code base.
  
Save the following code to a <code>fetchNixpkgs.nix</code> file within your project:
+
To do so, you can use <code>builtins.fetchTarball</code>, like this:
  
 
<syntaxhighlight lang="nix">
 
<syntaxhighlight lang="nix">
{ rev                            # The Git revision of nixpkgs to fetch
+
let
, sha256                         # The SHA256 of the downloaded data
+
  nixpkgs = builtins.fetchTarball {
, outputSha256 ? null            # The SHA256 fixed-output hash
+
    url    = "https://github.com/NixOS/nixpkgs/archive/3389f23412877913b9d22a58dfb241684653d7e9.tar.gz";
, system ? builtins.currentSystem # This is overridable if necessary
+
    sha256 = "0wgm7sk9fca38a50hrsqwz6q79z35gqgb9nw80xz7pfdr4jy9pf8";
}:
+
  };
  
if (0 <= builtins.compareVersions builtins.nixVersion "1.12")
+
  pkgs = import nixpkgs { config = {}; };
  
# In Nix 1.12, we can just give a `sha256` to `builtins.fetchTarball`.
+
in
then (
+
   ...
  builtins.fetchTarball {
 
    url = "https://github.com/NixOS/nixpkgs/archive/${rev}.tar.gz";
 
    sha256 = outputSha256;
 
  })
 
 
 
# This hack should at least work for Nix 1.11
 
else (
 
   (rec {
 
    tarball = import <nix/fetchurl.nix> {
 
      url = "https://github.com/NixOS/nixpkgs/archive/${rev}.tar.gz";
 
      inherit sha256;
 
    };
 
 
 
    builtin-paths = import <nix/config.nix>;
 
     
 
    script = builtins.toFile "nixpkgs-unpacker" ''
 
      "$coreutils/mkdir" "$out"
 
      cd "$out"
 
      "$gzip" --decompress < "$tarball" | "$tar" -x --strip-components=1
 
    '';
 
 
 
    nixpkgs = builtins.derivation ({
 
      name = "nixpkgs-${builtins.substring 0 6 rev}";
 
 
 
      builder = builtins.storePath builtin-paths.shell;
 
 
 
      args = [ script ];
 
 
 
      inherit tarball system;
 
 
 
      tar      = builtins.storePath builtin-paths.tar;
 
      gzip      = builtins.storePath builtin-paths.gzip;
 
      coreutils = builtins.storePath builtin-paths.coreutils;
 
    } // (if null == outputSha256 then { } else {
 
      outputHashMode = "recursive";
 
      outputHashAlgo = "sha256";
 
      outputHash = outputSha256;
 
    }));
 
  }).nixpkgs)
 
 
</syntaxhighlight>
 
</syntaxhighlight>
  
... and then you can use the saved file to fetch Nixpkgs like this:
+
… replacing <code>3389f2…</code> with the desired revision of Nixpkgs and replacing <code>0wgm7s…</code> with the corresponding SHA256 hash.
  
<syntaxhighlight lang="nix">
+
You can use the following command to obtain the correct SHA256 hash to use if you prefer not to use trial and error:
let
 
  fetchNixpkgs = import ./fetchNixpkgs.nix;
 
  
  nixpkgs = fetchNixpkgs {
+
<syntaxhighlight lang="bash">
    rev          = "3389f23412877913b9d22a58dfb241684653d7e9";
+
$ nix-prefetch-url --unpack "https://github.com/NixOS/nixpkgs/archive/${REVISION}.tar.gz"
    sha256      = "1zf05a90d29bpl7j56y20r3kmrl4xkvg7gsfi55n6bb2r0xp2ma5";
 
    outputSha256 = "0wgm7sk9fca38a50hrsqwz6q79z35gqgb9nw80xz7pfdr4jy9pf8";
 
  };
 
 
 
  pkgs = import nixpkgs { config = {}; };
 
in
 
  ...
 
 
</syntaxhighlight>
 
</syntaxhighlight>
  
 
[[Category:Nix]] [[Category:Nixpkgs]] [[Category:Cookbook]]
 
[[Category:Nix]] [[Category:Nixpkgs]] [[Category:Cookbook]]

Latest revision as of 10:55, 6 April 2024

You can fetch Nixpkgs with an empty NIX_PATH. This comes in handy if you want to remove impure references to the NIX_PATH from your code base.

To do so, you can use builtins.fetchTarball, like this:

let
  nixpkgs = builtins.fetchTarball {
    url    = "https://github.com/NixOS/nixpkgs/archive/3389f23412877913b9d22a58dfb241684653d7e9.tar.gz";
    sha256 = "0wgm7sk9fca38a50hrsqwz6q79z35gqgb9nw80xz7pfdr4jy9pf8";
  };

  pkgs = import nixpkgs { config = {}; };

in
  ...

… replacing 3389f2… with the desired revision of Nixpkgs and replacing 0wgm7s… with the corresponding SHA256 hash.

You can use the following command to obtain the correct SHA256 hash to use if you prefer not to use trial and error:

$ nix-prefetch-url --unpack "https://github.com/NixOS/nixpkgs/archive/${REVISION}.tar.gz"