https://gerrit.lix.systems/c/lix/+/2100 has now been merged. I'm pretty sure that should fix the upstream corruption bug, so I'm going to close this.
I filed lix-project/lix#560 about the broken symlink.
/etc/ssl/certs/ca-certificates.crt symlink breaks SSL certs
I haven't run a fresh install in ages, my recollection is it sets up the default profile with both lix and pkgs.cacert, and that default profile is how it should find the certs. If you have a…
launchctl stop is a legacy command, it does not take a service-target like system/org.nixos.nix-daemon, it takes a label (like org.nixos.nix-daemon) and uses the current user to determine…
Lix looks at /etc/ssl/certs/ca-certificates.crt and /nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt by default for the ssl-cert-file option, which it will then override if…
/private/etc/ssl/openssl.cnf
The upstream NixOS/nix issue is still open, but I don't expect them to do anything about this either, so I'm going to go ahead and close it. Derivations should not be invoking tools linked against…
/private/etc/ssl/openssl.cnf
/private/etc/ssl/openssl.cnf
This was caused by the curl binary from the rust overlay linking against the system libcurl and was fixed in https://github.com/oxalica/rust-overlay/pull/149. There's also a similar issue with…
nix develop doesn't work for derivations that don't set outputs attribute
I submitted https://gerrit.lix.systems/c/lix/+/2100 as a proposed fix for the underlying issue, though I don't know how to actually test the store corruption to make sure this solves it.
Digging into the underlying code, it's hard to trace through all this but it looks like addToStore() can end up invoked from multiple threads, and random() is fundamentally not a thread-safe…
Should we hard error, or should we perhaps print a warning and ignore the setting? My concern is if this is an error then when the user hits this they can't run nix profile rollback or `nix-env…
Happy to point Lix users to it from the nix-darwin error message; do you know of a reliable way to distinguish a setup installed with the Determinate Systems installer from one installed with…