···416416 */
417417 oldestSupportedRelease =
418418 # Update on master only. Do not backport.
419419- 2405;
419419+ 2411;
420420421421 /**
422422 Whether a feature is supported in all supported releases (at the time of
···44 pkgs,
55 ...
66}:
77+88+with lib;
99+710{
811 # added 2019-11-11
912 imports = [
1010- (lib.mkRemovedOptionModule [ "services" "xserver" "displayManager" "slim" ] ''
1313+ (mkRemovedOptionModule [ "services" "xserver" "displayManager" "slim" ] ''
1114 The SLIM project is abandoned and their last release was in 2013.
1215 Because of this it poses a security risk to your system.
1316 Other issues include it not fully supporting systemd and logind sessions.
···77}:
88crystal.buildCrystalPackage rec {
99 pname = "gi-crystal";
1010- version = "0.22.2";
1010+ version = "0.24.0";
11111212 src = fetchFromGitHub {
1313 owner = "hugopl";
1414 repo = "gi-crystal";
1515 rev = "v${version}";
1616- hash = "sha256-JfBbKqobikpTGMryeO86zZ46EbOHybem+Cc5FZEL6i4=";
1616+ hash = "sha256-0LsYREn4zWLQYUTpNWJhLLHWmg7UQzxOoQiAMmw3ZXQ=";
1717 };
18181919 # Make sure gi-crystal picks up the name of the so or dylib and not the leading nix store path
+419
pkgs/by-name/gl/glib/package.nix
···11+{
22+ config,
33+ lib,
44+ stdenv,
55+ fetchurl,
66+ gettext,
77+ meson,
88+ ninja,
99+ pkg-config,
1010+ perl,
1111+ python3,
1212+ python3Packages,
1313+ libiconv,
1414+ zlib,
1515+ libffi,
1616+ pcre2,
1717+ elfutils,
1818+ gnome,
1919+ libselinux,
2020+ bash,
2121+ gnum4,
2222+ libxslt,
2323+ docutils,
2424+ gi-docgen,
2525+ # use util-linuxMinimal to avoid circular dependency (util-linux, systemd, glib)
2626+ util-linuxMinimal ? null,
2727+ buildPackages,
2828+2929+ # this is just for tests (not in the closure of any regular package)
3030+ dbus,
3131+ tzdata,
3232+ desktop-file-utils,
3333+ shared-mime-info,
3434+ darwin,
3535+ makeHardcodeGsettingsPatch,
3636+ testers,
3737+ gobject-introspection,
3838+ libsystemtap,
3939+ libsysprof-capture,
4040+ mesonEmulatorHook,
4141+ withIntrospection ?
4242+ stdenv.hostPlatform.emulatorAvailable buildPackages
4343+ && lib.meta.availableOn stdenv.hostPlatform gobject-introspection
4444+ && stdenv.hostPlatform.isLittleEndian == stdenv.buildPlatform.isLittleEndian,
4545+}:
4646+4747+assert stdenv.hostPlatform.isLinux -> util-linuxMinimal != null;
4848+4949+let
5050+ gobject-introspection' = buildPackages.gobject-introspection.override {
5151+ propagateFullGlib = false;
5252+ # Avoid introducing cairo, which enables gobjectSupport by default.
5353+ x11Support = false;
5454+ };
5555+5656+ librarySuffix =
5757+ if (stdenv.hostPlatform.extensions.library == ".so") then
5858+ "2.0.so.0"
5959+ else if (stdenv.hostPlatform.extensions.library == ".dylib") then
6060+ "2.0.0.dylib"
6161+ else if (stdenv.hostPlatform.extensions.library == ".a") then
6262+ "2.0.a"
6363+ else if (stdenv.hostPlatform.extensions.library == ".dll") then
6464+ "2.0-0.dll"
6565+ else
6666+ "2.0-0.lib";
6767+6868+ systemtap' = buildPackages.linuxPackages.systemtap.override { withStap = false; };
6969+7070+ withDtrace =
7171+ lib.meta.availableOn stdenv.buildPlatform systemtap'
7272+ &&
7373+ # dtrace support requires sys/sdt.h header
7474+ lib.meta.availableOn stdenv.hostPlatform libsystemtap;
7575+in
7676+7777+stdenv.mkDerivation (finalAttrs: {
7878+ pname = "glib";
7979+ version = "2.82.4";
8080+8181+ outputs = [
8282+ "bin"
8383+ "out"
8484+ "dev"
8585+ "devdoc"
8686+ ];
8787+8888+ setupHook = ./setup-hook.sh;
8989+9090+ src = fetchurl {
9191+ url = "mirror://gnome/sources/glib/${lib.versions.majorMinor finalAttrs.version}/glib-${finalAttrs.version}.tar.xz";
9292+ hash = "sha256-N90Id/6WTNFemicQsEShgw+xvZNlKm0Mtriy3/GHxwk=";
9393+ };
9494+9595+ patches =
9696+ lib.optionals stdenv.hostPlatform.isDarwin [
9797+ ./darwin-compilation.patch
9898+ ]
9999+ ++ lib.optionals stdenv.hostPlatform.isMusl [
100100+ ./quark_init_on_demand.patch
101101+ ./gobject_init_on_demand.patch
102102+ ]
103103+ ++ [
104104+ # This patch lets GLib's GDesktopAppInfo API watch and notice changes
105105+ # to the Nix user and system profiles. That way, the list of available
106106+ # applications shown by the desktop environment is immediately updated
107107+ # when the user installs or removes any
108108+ # (see <https://issues.guix.gnu.org/35594>).
109109+110110+ # It does so by monitoring /nix/var/nix/profiles (for changes to the system
111111+ # profile) and /nix/var/nix/profiles/per-user/USER (for changes to the user
112112+ # profile) as well as /etc/profiles/per-user (for chanes to the user
113113+ # environment profile) and crawling their share/applications sub-directory when
114114+ # changes happen.
115115+ ./glib-appinfo-watch.patch
116116+117117+ ./schema-override-variable.patch
118118+119119+ # Add support for Pantheon’s terminal emulator.
120120+ ./elementary-terminal-support.patch
121121+122122+ # GLib contains many binaries used for different purposes;
123123+ # we will install them to different outputs:
124124+ # 1. Tools for desktop environment and introspection ($bin)
125125+ # * gapplication (non-darwin)
126126+ # * gdbus
127127+ # * gi-compile-repository
128128+ # * gi-decompile-typelib
129129+ # * gi-inspect-typelib
130130+ # * gio
131131+ # * gio-launch-desktop (symlink to $out)
132132+ # * gsettings
133133+ # 2. Development/build tools ($dev)
134134+ # * gdbus-codegen
135135+ # * gio-querymodules
136136+ # * glib-compile-resources
137137+ # * glib-compile-schemas
138138+ # * glib-genmarshal
139139+ # * glib-gettextize
140140+ # * glib-mkenums
141141+ # * gobject-query
142142+ # * gresource
143143+ # * gtester
144144+ # * gtester-report
145145+ # 3. Tools for desktop environment that cannot go to $bin due to $out depending on them ($out)
146146+ # * gio-launch-desktop
147147+ ./split-dev-programs.patch
148148+149149+ # Tell Meson to install gdb scripts next to the lib
150150+ # GDB only looks there and in ${gdb}/share/gdb/auto-load,
151151+ # and by default meson installs in to $out/share/gdb/auto-load
152152+ # which does not help
153153+ ./gdb_script.patch
154154+ ];
155155+156156+ strictDeps = true;
157157+158158+ buildInputs =
159159+ [
160160+ finalAttrs.setupHook
161161+ ]
162162+ ++ lib.optionals (!stdenv.hostPlatform.isFreeBSD) [
163163+ libsysprof-capture
164164+ ]
165165+ ++ [
166166+ pcre2
167167+ ]
168168+ ++ lib.optionals (!stdenv.hostPlatform.isWindows) [
169169+ bash
170170+ gnum4 # install glib-gettextize and m4 macros for other apps to use
171171+ ]
172172+ ++ lib.optionals (lib.meta.availableOn stdenv.hostPlatform elfutils) [
173173+ elfutils
174174+ ]
175175+ ++ lib.optionals withDtrace [
176176+ libsystemtap
177177+ ]
178178+ ++ lib.optionals stdenv.hostPlatform.isLinux [
179179+ libselinux
180180+ util-linuxMinimal # for libmount
181181+ ]
182182+ ++ lib.optionals stdenv.hostPlatform.isDarwin (
183183+ with darwin.apple_sdk.frameworks;
184184+ [
185185+ AppKit
186186+ Carbon
187187+ Cocoa
188188+ CoreFoundation
189189+ CoreServices
190190+ Foundation
191191+ ]
192192+ );
193193+194194+ depsBuildBuild = [
195195+ pkg-config # required to find native gi-docgen
196196+ ];
197197+198198+ nativeBuildInputs =
199199+ [
200200+ docutils # for rst2man, rst2html5
201201+ meson
202202+ ninja
203203+ pkg-config
204204+ perl
205205+ python3
206206+ python3Packages.packaging # mostly used to make meson happy
207207+ python3Packages.wrapPython # for patchPythonScript
208208+ gettext
209209+ libxslt
210210+ ]
211211+ ++ lib.optionals withIntrospection [
212212+ gi-docgen
213213+ gobject-introspection'
214214+ ]
215215+ ++ lib.optionals (withIntrospection && !stdenv.buildPlatform.canExecute stdenv.hostPlatform) [
216216+ mesonEmulatorHook
217217+ ]
218218+ ++ lib.optionals withDtrace [
219219+ systemtap' # for dtrace
220220+ ];
221221+222222+ propagatedBuildInputs = [
223223+ zlib
224224+ libffi
225225+ gettext
226226+ libiconv
227227+ ];
228228+229229+ nativeCheckInputs = [
230230+ tzdata
231231+ desktop-file-utils
232232+ shared-mime-info
233233+ ];
234234+235235+ mesonFlags =
236236+ [
237237+ "-Dglib_debug=disabled" # https://gitlab.gnome.org/GNOME/glib/-/issues/3421#note_2206315
238238+ "-Ddocumentation=true" # gvariant specification can be built without gi-docgen
239239+ (lib.mesonEnable "dtrace" withDtrace)
240240+ (lib.mesonEnable "systemtap" withDtrace) # requires dtrace option to be enabled
241241+ "-Dnls=enabled"
242242+ "-Ddevbindir=${placeholder "dev"}/bin"
243243+ (lib.mesonEnable "introspection" withIntrospection)
244244+ # FIXME: Fails when linking target glib/tests/libconstructor-helper.so
245245+ # relocation R_X86_64_32 against hidden symbol `__TMC_END__' can not be used when making a shared object
246246+ "-Dtests=${lib.boolToString (!stdenv.hostPlatform.isStatic)}"
247247+ ]
248248+ ++ lib.optionals (!lib.meta.availableOn stdenv.hostPlatform elfutils) [
249249+ "-Dlibelf=disabled"
250250+ ]
251251+ ++ lib.optionals stdenv.hostPlatform.isFreeBSD [
252252+ "-Db_lundef=false"
253253+ "-Dxattr=false"
254254+ "-Dsysprof=disabled" # sysprof-capture does not build on FreeBSD
255255+ ];
256256+257257+ env = {
258258+ NIX_CFLAGS_COMPILE = toString [
259259+ "-Wno-error=nonnull"
260260+ # Default for release buildtype but passed manually because
261261+ # we're using plain
262262+ "-DG_DISABLE_CAST_CHECKS"
263263+ ];
264264+ };
265265+266266+ postPatch =
267267+ ''
268268+ patchShebangs glib/gen-unicode-tables.pl
269269+ patchShebangs glib/tests/gen-casefold-txt.py
270270+ patchShebangs glib/tests/gen-casemap-txt.py
271271+ patchShebangs tools/gen-visibility-macros.py
272272+ patchShebangs tests
273273+274274+ # Needs machine-id, comment the test
275275+ sed -e '/\/gdbus\/codegen-peer-to-peer/ s/^\/*/\/\//' -i gio/tests/gdbus-peer.c
276276+ sed -e '/g_test_add_func/ s/^\/*/\/\//' -i gio/tests/gdbus-address-get-session.c
277277+ # All gschemas fail to pass the test, upstream bug?
278278+ sed -e '/g_test_add_data_func/ s/^\/*/\/\//' -i gio/tests/gschema-compile.c
279279+ # Cannot reproduce the failing test_associations on hydra
280280+ sed -e '/\/appinfo\/associations/d' -i gio/tests/appinfo.c
281281+ # Needed because of libtool wrappers
282282+ sed -e '/g_subprocess_launcher_set_environ (launcher, envp);/a g_subprocess_launcher_setenv (launcher, "PATH", g_getenv("PATH"), TRUE);' -i gio/tests/gsubprocess.c
283283+ ''
284284+ + lib.optionalString stdenv.hostPlatform.isWindows ''
285285+ substituteInPlace gio/win32/meson.build \
286286+ --replace "libintl, " ""
287287+ '';
288288+289289+ postConfigure = ''
290290+ patchShebangs gio/gdbus-2.0/codegen/gdbus-codegen gobject/glib-{genmarshal,mkenums}
291291+ '';
292292+293293+ DETERMINISTIC_BUILD = 1;
294294+295295+ postInstall = ''
296296+ moveToOutput "share/glib-2.0" "$dev"
297297+ moveToOutput "share/glib-2.0/gdb" "$out"
298298+ substituteInPlace "$dev/bin/gdbus-codegen" --replace "$out" "$dev"
299299+ sed -i "$dev/bin/glib-gettextize" -e "s|^gettext_dir=.*|gettext_dir=$dev/share/glib-2.0/gettext|"
300300+301301+ # This file is *included* in gtk3 and would introduce runtime reference via __FILE__.
302302+ sed '1i#line 1 "glib-${finalAttrs.version}/include/glib-2.0/gobject/gobjectnotifyqueue.c"' \
303303+ -i "$dev"/include/glib-2.0/gobject/gobjectnotifyqueue.c
304304+ for i in $bin/bin/*; do
305305+ moveToOutput "share/bash-completion/completions/''${i##*/}" "$bin"
306306+ done
307307+ for i in $dev/bin/*; do
308308+ moveToOutput "share/bash-completion/completions/''${i##*/}" "$dev"
309309+ done
310310+ '';
311311+312312+ preFixup = lib.optionalString (!stdenv.hostPlatform.isStatic) ''
313313+ buildPythonPath ${python3Packages.packaging}
314314+ patchPythonScript "$dev/share/glib-2.0/codegen/utils.py"
315315+ '';
316316+317317+ # Move man pages to the same output as their binaries (needs to be
318318+ # done after preFixupHooks which moves man pages too - in
319319+ # _multioutDocs)
320320+ postFixup = ''
321321+ for i in $dev/bin/*; do
322322+ moveToOutput "share/man/man1/''${i##*/}.1.*" "$dev"
323323+ done
324324+325325+ # Cannot be in postInstall, otherwise _multioutDocs hook in preFixup will move right back.
326326+ moveToOutput "share/doc" "$devdoc"
327327+ '';
328328+329329+ # Conditional necessary to break infinite recursion with passthru.tests
330330+ preCheck = lib.optionalString finalAttrs.finalPackage.doCheck or config.doCheckByDefault or false ''
331331+ export LD_LIBRARY_PATH="$NIX_BUILD_TOP/glib-${finalAttrs.version}/glib/.libs''${LD_LIBRARY_PATH:+:}$LD_LIBRARY_PATH"
332332+ export TZDIR="${tzdata}/share/zoneinfo"
333333+ export XDG_CACHE_HOME="$TMP"
334334+ export XDG_RUNTIME_HOME="$TMP"
335335+ export HOME="$TMP"
336336+ export XDG_DATA_DIRS="${desktop-file-utils}/share:${shared-mime-info}/share"
337337+ export G_TEST_DBUS_DAEMON="${dbus}/bin/dbus-daemon"
338338+339339+ # pkg_config_tests expects a PKG_CONFIG_PATH that points to meson-private, wrapped pkg-config
340340+ # tries to be clever and picks up the wrong glib at the end.
341341+ export PATH="${buildPackages.pkg-config-unwrapped}/bin:$PATH:$(pwd)/gobject"
342342+ echo "PATH=$PATH"
343343+344344+ # Our gobject-introspection patches make the shared library paths absolute
345345+ # in the GIR files. When running tests, the library is not yet installed,
346346+ # though, so we need to replace the absolute path with a local one during build.
347347+ # We are using a symlink that we will delete before installation.
348348+ mkdir -p $out/lib
349349+ ln -s $PWD/gobject/libgobject-${librarySuffix} $out/lib/libgobject-${librarySuffix}
350350+ ln -s $PWD/gio/libgio-${librarySuffix} $out/lib/libgio-${librarySuffix}
351351+ ln -s $PWD/glib/libglib-${librarySuffix} $out/lib/libglib-${librarySuffix}
352352+ '';
353353+354354+ postCheck = ''
355355+ rm $out/lib/libgobject-${librarySuffix}
356356+ rm $out/lib/libgio-${librarySuffix}
357357+ rm $out/lib/libglib-${librarySuffix}
358358+ '';
359359+360360+ separateDebugInfo = stdenv.hostPlatform.isLinux;
361361+362362+ passthru = rec {
363363+ gioModuleDir = "lib/gio/modules";
364364+365365+ makeSchemaDataDirPath = dir: name: "${dir}/share/gsettings-schemas/${name}";
366366+ makeSchemaPath = dir: name: "${makeSchemaDataDirPath dir name}/glib-2.0/schemas";
367367+ getSchemaPath = pkg: makeSchemaPath pkg pkg.name;
368368+ getSchemaDataDirPath = pkg: makeSchemaDataDirPath pkg pkg.name;
369369+370370+ tests = {
371371+ withChecks = finalAttrs.finalPackage.overrideAttrs (_: {
372372+ doCheck = true;
373373+ });
374374+ pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;
375375+ };
376376+377377+ updateScript = gnome.updateScript {
378378+ packageName = "glib";
379379+ versionPolicy = "odd-unstable";
380380+ };
381381+382382+ mkHardcodeGsettingsPatch =
383383+ {
384384+ src,
385385+ glib-schema-to-var,
386386+ }:
387387+ builtins.trace
388388+ "glib.mkHardcodeGsettingsPatch is deprecated, please use makeHardcodeGsettingsPatch instead"
389389+ (makeHardcodeGsettingsPatch {
390390+ inherit src;
391391+ schemaIdToVariableMapping = glib-schema-to-var;
392392+ });
393393+ };
394394+395395+ meta = with lib; {
396396+ description = "C library of programming buildings blocks";
397397+ homepage = "https://gitlab.gnome.org/GNOME/glib";
398398+ license = licenses.lgpl21Plus;
399399+ maintainers =
400400+ teams.gnome.members
401401+ ++ (with maintainers; [
402402+ lovek323
403403+ raskin
404404+ ]);
405405+ pkgConfigModules = [
406406+ "gio-2.0"
407407+ "gobject-2.0"
408408+ "gthread-2.0"
409409+ ];
410410+ platforms = platforms.unix ++ platforms.windows;
411411+412412+ longDescription = ''
413413+ GLib provides the core application building blocks for libraries
414414+ and applications written in C. It provides the core object
415415+ system used in GNOME, the main loop implementation, and a large
416416+ set of utility functions for strings and common data structures.
417417+ '';
418418+ };
419419+})
···44 fetchFromGitHub,
55 perl,
66 which,
77- boost,
87 rdkafka,
98 jansson,
109 curl,
···3534 ];
36353736 buildInputs = [
3838- boost
3937 rdkafka
4038 jansson
4139 curl
···4341 avro-cpp
4442 ];
45434646- makeFlags = [ "GEN_PKG_CONFIG=y" ];
4444+ configureFlags = [
4545+ # avro-cpp public headers use at least C++17 features, but libserdes configure scripts
4646+ # basically cap it at C++11. It's really unfortunate that we have to patch the configure scripts for this,
4747+ # but this seems to be the most sensible way.
4848+ # - NIX_CFLAGS_COMPILE - fails because of -Werror in compiler checks since --std=... has no effect for C compilers.
4949+ # - CXXFLAGS without patching configure.self does nothing, because --std=c++11 is appended to the final flags, overriding
5050+ # everything specified manually.
5151+ "--CXXFLAGS=${toString [ "--std=c++17" ]}"
5252+ ];
5353+5454+ makeFlags = [
5555+ "GEN_PKG_CONFIG=y"
5656+ ];
47574858 postPatch = ''
4959 patchShebangs configure lds-gen.pl
6060+ # Don't append the standard to CXXFLAGS, since we want to set it higher for avro-cpp.
6161+ substituteInPlace configure.self --replace-fail \
6262+ 'mkl_mkvar_append CXXFLAGS CXXFLAGS "--std=c++11"' \
6363+ ":" # Do nothing, we set the standard ourselves.
5064 '';
51655266 # Has a configure script but it’s not Autoconf so steal some bits from multiple-outputs.sh:
···8899buildGoModule rec {
1010 pname = "nsc";
1111- version = "2.10.1";
1111+ version = "2.10.2";
12121313 src = fetchFromGitHub {
1414 owner = "nats-io";
1515 repo = pname;
1616 rev = "v${version}";
1717- hash = "sha256-8HFlWrkDgekW/0IV9LQdn68vygFq0QtR6p4xyJZwAw4=";
1717+ hash = "sha256-F/9yAF1vXG4eWMmS6l/qWqlEV8YkS7nihHN2vK3JFbE=";
1818 };
19192020 ldflags = [
···4747 # the test strips table formatting from the command output in a naive way
4848 # that removes all the table characters, including '-'.
4949 # The nix build directory looks something like:
5050- # /private/tmp/nix-build-nsc-2.10.1.drv-0/nsc_test2000598938/keys
5050+ # /private/tmp/nix-build-nsc-2.10.2.drv-0/nsc_test2000598938/keys
5151 # Then the `-` are removed from the path unintentionally and the test fails.
5252 # This should be fixed upstream to avoid mangling the path when
5353 # removing the table decorations from the command output.
···1414To update this package
1515======================
16161717-#. Bump the ``./package.json`` version pin
1818-#. Run ``nix-shell -p nodejs --command "npm i --package-lock-only"``
1717+#. Bump the ``./manifests/package.json`` version pin
1818+#. Run ``(cd manifests && nix-shell -p nodejs --command "npm i --package-lock-only")``
1919#. Update ``npmDeps.hash`` in the ``package.nix``
···88buildPythonPackage rec {
99 pname = "libusbsio";
1010 format = "setuptools";
1111- version = "2.1.12";
1111+ version = "2.1.13";
1212 # If the versions come back into sync switch back to inheriting from c lib
1313 # inherit (libusbsio) version;
14141515 src = fetchPypi {
1616 inherit pname version;
1717- hash = "sha256-RdUhwilBOwg19ay3Po3zsxqlBV9FTy3btJDbO4YEKS8=";
1717+ hash = "sha256-3xudSyqfXq3wsFdOgBeGK1nSY0NZjx9UhmTqbQGXWyU=";
1818 };
19192020 # The source includes both the python module directly and also prebuilt binaries
···2727, # Allow a configuration attribute set to be passed in as an argument.
2828 config ? {}
29293030+, # Temporary hack to let Nixpkgs forbid internal use of `lib.fileset`
3131+ # until <https://github.com/NixOS/nix/issues/11503> is fixed.
3232+ __allowFileset ? true
3333+3034, # List of overlays layers used to extend Nixpkgs.
3135 overlays ? []
3236···4751 crossSystem0 = crossSystem;
48524953in let
5050- lib = import ../../lib;
5454+ pristineLib = import ../../lib;
5555+5656+ lib =
5757+ if __allowFileset then
5858+ pristineLib
5959+ else
6060+ pristineLib.extend (_: _: {
6161+ fileset = abort ''
6262+6363+ The use of `lib.fileset` is currently forbidden in Nixpkgs due to the
6464+ upstream Nix bug <https://github.com/NixOS/nix/issues/11503>. This
6565+ causes difficult‐to‐debug errors when combined with chroot stores,
6666+ such as in the NixOS installer.
6767+6868+ For packages that require source to be vendored inside Nixpkgs,
6969+ please use a subdirectory of the package instead.
7070+ '';
7171+ });
51725273 inherit (lib) throwIfNot;
5374
···3737 cudaSupport = true;
3838 inHydra = true;
3939 };
4040+4141+ __allowFileset = false;
4042 },
4143 # We only build the full package set on infrequently releasing channels.
4244 full ? false,
+14-10
pkgs/top-level/release.nix
···2828 # Strip most of attributes when evaluating to spare memory usage
2929, scrubJobs ? true
3030 # Attributes passed to nixpkgs. Don't build packages marked as unfree.
3131-, nixpkgsArgs ? { config = {
3232- allowUnfree = false;
3333- inHydra = true;
3434- # Exceptional unsafe packages that we still build and distribute,
3535- # so users choosing to allow don't have to rebuild them every time.
3636- permittedInsecurePackages = [
3737- "olm-3.2.16" # see PR #347899
3838- "kanidm_1_3-1.3.3"
3939- ];
4040- }; }
3131+, nixpkgsArgs ? {
3232+ config = {
3333+ allowUnfree = false;
3434+ inHydra = true;
3535+ # Exceptional unsafe packages that we still build and distribute,
3636+ # so users choosing to allow don't have to rebuild them every time.
3737+ permittedInsecurePackages = [
3838+ "olm-3.2.16" # see PR #347899
3939+ "kanidm_1_3-1.3.3"
4040+ ];
4141+ };
4242+4343+ __allowFileset = false;
4444+ }
41454246 # This flag, if set to true, will inhibit the use of `mapTestOn`
4347 # and `release-lib.packagePlatforms`. Generally, it causes the