mirror of
https://github.com/NixOS/nix
synced 2025-06-25 06:31:14 +02:00
e161393299
This allows writing lock files with dirty inputs, so long as they have a NAR hash. (Currently they always have a NAR hash, but with lazy trees that may not always be the case.) Generally dirty locks are bad for reproducibility (we can detect if the dirty input has changed, but we have no way to fetch it except substitution). Hence we don't allow them by default. Fixes #11181.
44 lines
1.2 KiB
Bash
Executable file
44 lines
1.2 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
|
|
source ./common.sh
|
|
|
|
requireGit
|
|
|
|
flake1Dir=$TEST_ROOT/flake1
|
|
flake2Dir=$TEST_ROOT/flake2
|
|
|
|
createGitRepo "$flake1Dir"
|
|
cat > "$flake1Dir"/flake.nix <<EOF
|
|
{
|
|
outputs = { self }: { x = import ./x.nix; };
|
|
}
|
|
EOF
|
|
echo 123 > "$flake1Dir"/x.nix
|
|
git -C "$flake1Dir" add flake.nix x.nix
|
|
git -C "$flake1Dir" commit -m Initial
|
|
|
|
createGitRepo "$flake2Dir"
|
|
cat > "$flake2Dir"/flake.nix <<EOF
|
|
{
|
|
outputs = { self, flake1 }: { x = flake1.x; };
|
|
}
|
|
EOF
|
|
git -C "$flake2Dir" add flake.nix
|
|
|
|
[[ $(nix eval --json "$flake2Dir#x" --override-input flake1 "$TEST_ROOT/flake1") = 123 ]]
|
|
|
|
echo 456 > "$flake1Dir"/x.nix
|
|
|
|
[[ $(nix eval --json "$flake2Dir#x" --override-input flake1 "$TEST_ROOT/flake1") = 456 ]]
|
|
|
|
# Dirty overrides require --allow-dirty-locks.
|
|
expectStderr 1 nix flake lock "$flake2Dir" --override-input flake1 "$TEST_ROOT/flake1" |
|
|
grepQuiet "Will not write lock file.*because it has an unlocked input"
|
|
|
|
nix flake lock "$flake2Dir" --override-input flake1 "$TEST_ROOT/flake1" --allow-dirty-locks
|
|
|
|
# Using a lock file with a dirty lock requires --allow-dirty-locks as well.
|
|
expectStderr 1 nix eval "$flake2Dir#x" |
|
|
grepQuiet "Lock file contains unlocked input"
|
|
|
|
[[ $(nix eval "$flake2Dir#x" --allow-dirty-locks) = 456 ]]
|