Launching shell from repl emits strange errors #811

New issue

Closed

opened 2025-04-28 11:03:02 +00:00 by schuelermine · 2 comments

schuelermine commented 2025-04-28 11:03:02 +00:00

Copy link

Describe the bug

Using :sh in nix repl causes messages of the form “warning: Ignoring the client-specified setting '<something>', because it is a restricted setting and you are not a trusted user” to appear

Steps To Reproduce

1. Start nix repl

2. Get an expression for a derivation

3. Type :sh <expression> to launch a nix-shell

4. You get this error:

   Click to expand error

   warning: Ignoring the client-specified setting 'allow-symlinked-store', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'allowed-impure-host-deps', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'always-allow-substitutes', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'auto-allocate-uids', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'auto-optimise-store', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'build-dir', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'build-hook', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'build-users-group', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'builders-use-substitutes', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'compress-build-log', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'diff-hook', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'download-attempts', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'download-speed', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'enable-core-dumps', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'extra-platforms', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'fsync-metadata', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'gc-reserved-space', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'hashed-mirrors', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'http-connections', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'http2', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'id-count', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'ignored-acls', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'impersonate-linux-26', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'keep-build-log', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'keep-derivations', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'keep-env-derivations', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'keep-outputs', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'log-lines', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'max-build-log-size', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'max-free', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'max-substitution-jobs', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'min-free', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'min-free-check-interval', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'nar-buffer-size', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'narinfo-cache-negative-ttl', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'narinfo-cache-positive-ttl', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'netrc-file', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'post-build-hook', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'pre-build-hook', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'print-missing', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'require-drop-supplementary-groups', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'require-sigs', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'run-diff-hook', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'sandbox', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'sandbox-build-dir', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'sandbox-dev-shm-size', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'sandbox-fallback', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'sandbox-paths', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'secret-key-files', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'ssl-cert-file', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'stalled-download-timeout', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'start-id', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'sync-before-registering', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'system', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'system-features', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'tarball-ttl', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'trusted-public-keys', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'trusted-substituters', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'use-cgroups', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'use-sqlite-wal', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'use-xdg-base-directories', because it is a restricted setting and you are not a trusted user
   warning: Ignoring the client-specified setting 'user-agent-suffix', because it is a restricted setting and you are not a trusted user
   

Expected behavior

No errors

nix --version output

nix (Lix, like Nix) 2.91.1

## Describe the bug Using `:sh` in `nix repl` causes messages of the form “warning: Ignoring the client-specified setting '\<something\>', because it is a restricted setting and you are not a trusted user” to appear ## Steps To Reproduce 1. Start `nix repl` 2. Get an expression for a derivation 3. Type `:sh <expression>` to launch a `nix-shell` 4. You get this error: <details> <summary> Click to expand error </summary> ``` warning: Ignoring the client-specified setting 'allow-symlinked-store', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'allowed-impure-host-deps', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'always-allow-substitutes', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'auto-allocate-uids', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'auto-optimise-store', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'build-dir', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'build-hook', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'build-users-group', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'builders-use-substitutes', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'compress-build-log', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'diff-hook', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'download-attempts', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'download-speed', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'enable-core-dumps', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'extra-platforms', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'fsync-metadata', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'gc-reserved-space', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'hashed-mirrors', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'http-connections', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'http2', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'id-count', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'ignored-acls', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'impersonate-linux-26', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'keep-build-log', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'keep-derivations', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'keep-env-derivations', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'keep-outputs', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'log-lines', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'max-build-log-size', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'max-free', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'max-substitution-jobs', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'min-free', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'min-free-check-interval', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'nar-buffer-size', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'narinfo-cache-negative-ttl', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'narinfo-cache-positive-ttl', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'netrc-file', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'post-build-hook', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'pre-build-hook', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'print-missing', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'require-drop-supplementary-groups', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'require-sigs', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'run-diff-hook', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'sandbox', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'sandbox-build-dir', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'sandbox-dev-shm-size', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'sandbox-fallback', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'sandbox-paths', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'secret-key-files', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'ssl-cert-file', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'stalled-download-timeout', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'start-id', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'sync-before-registering', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'system', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'system-features', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'tarball-ttl', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'trusted-public-keys', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'trusted-substituters', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'use-cgroups', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'use-sqlite-wal', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'use-xdg-base-directories', because it is a restricted setting and you are not a trusted user warning: Ignoring the client-specified setting 'user-agent-suffix', because it is a restricted setting and you are not a trusted user ``` </details> ## Expected behavior No errors ## `nix --version` output ``` nix (Lix, like Nix) 2.91.1 ```

schuelermine added the

bug

label 2025-04-28 11:03:02 +00:00

pennae added this to the 2.93 milestone 2025-04-28 11:11:45 +00:00

pennae commented 2025-04-28 11:12:00 +00:00

Owner

Copy link

@alois31 🫠

@alois31 🫠

lix-bot commented 2025-04-28 17:11:14 +00:00

Member

Copy link

This issue was mentioned on Gerrit on the following CLs:

• commit message in cl/3065 ("repl: only send overridden settings to nix subprocesses")

<!-- GERRIT_LINKBOT: {"cls": [{"backlink": "https://gerrit.lix.systems/c/lix/+/3065", "number": 3065, "kind": "commit message"}], "cl_meta": {"3065": {"change_title": "repl: only send overridden settings to nix subprocesses"}}} --> This issue was mentioned on Gerrit on the following CLs: * commit message in [cl/3065](https://gerrit.lix.systems/c/lix/+/3065) ("repl: only send overridden settings to nix subprocesses")

lix-project referenced this issue from a commit 2025-04-30 06:22:32 +00:00

repl: only send overridden settings to nix subprocesses

lix-project closed this issue 2025-04-30 06:22:32 +00:00

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

ci-config

sb/pennae/ci-config

release-2.93

release-2.91

release-2.92

sb/raito/darwin-kqueue-disablement

sb/raito/hydra-merge

sb/raito/phantom-referrers-gc

repl-overlay-example

reuse-compliance

release-2.90

sb/pennae/io-rewrite

git-series/activity-cleanup

sb/tom-hubrecht/primops.cc-v2

sb/bacchanalia/cache-strlen%topic=substr-perf

sb/qyriad/beta-1

sb/qyriad/2.90-beta.0

sb/rbt/test-branch

sb/rbt/justfile

sb/rbt/repl-overlays

sb/qyriad/maint-meson

sb/qyriad/maint/meson

sb/puck/meson-c-api

sb/jade/burn-it-all

dependabot/github_actions/zeebe-io/backport-action-2.4.1

dependabot/github_actions/cachix/install-nix-action-25

dependabot/github_actions/actions/labeler-5

dependabot/github_actions/cachix/cachix-action-14

2.93.3

2.92.3

2.93.2

2.91.3

2.92.2

2.91.2

2.93.1

2.93.0

2.92.0

2.91.1

2.91.0

2.90.0

2.90.0-rc1

2.90-beta.1

2.90-beta.0

Labels

Clear labels   

Affects/CppNix

Probably affects CppNix. This is a best-effort tag for troubles in old code; it exists to inform the CppNix team about problems they might care about also.

  

Affects/Nightly

Found in Lix nightly.

  

Affects/Only nightly

Tag for regressions in Lix nightly. We intend to fix all of these prior to releases.

  

Affects/Stable

Affects the stable release of Lix. Usually such issues affect nightly too but there is no guarantee.

  

Area/build-packaging

regarding the building or packaging of Lix itself

  

Area/cli

The command line interface of Lix

  

Area/evaluator

libexpr and anything else related to the evaluation of Nix expressions

  

Area/fetching

Fetching sources or other materials from the World Wide Web in Lix

  

Area/flakes

  

Area/language

language design, features, extensions, etc

  

Area/lix ci

Lix's own CI and deployment pipeline

  

Area/nix-eval-jobs

nix-eval-jobs for Lix

  

Area/profiles

profiles: nix-env, nix profile, and installer flavors all alike

  

Area/protocol

The protocol, used for communicating between the client and the daemon

  

Area/releng

Release engineering

  

Area/remote-builds

remote builds

  

Area/repl

nix repl

  

Area/repl/debugger

The --debugger that brings up a Lix repl

  

Area/store

libstore and anything else relating to the Nix store

  

bug

it's a bug

  

Context

contributors

This issue might require some context that isn't written down. It might be possible to handle as a person who already worked on this area.

  

Context

drive-by

This issue contains all the necessary information to do a drive-by contribution: that is, you don't have to talk with anyone at all to successfully solve it!

  

Context

maintainers

This issue requires a lot of know-how. Attention from maintainers is needed to proceed.

  

Context

RFD

This issue needs discussion from multiple maintainers and interested parties: it's a Request For Discussion.

  

crash 💥

Lix crashes (possibly bad error handling)

  

Cross Compilation

  

devx

development experience issues

  

docs

requires or is about documentation changes

  

Downstream Dependents

regarding an external tool's usage with Lix (e.g. nix-eval-jobs)

  

E/easy

bug is relatively simple and could simply be fixed with some minor effort

  

E/hard

this issue should probably be solved with close involvement of an expert

  

E/help wanted

maintainers may not get to this soon, but we want it fixed

  

E/reproducible

This bug is reproducible and obvious.

  

E/requires rearchitecture

this bug cannot be fixed properly without fixing a known architectural flaw

  

Feature/S3

S3 support in Lix

  

imported

Issue imported from upstream nix (please do not remove this label, it will cause dupes if import is rerun)

  

Language/Bash

  

Language/C++

  

Language/NixLang

  

Language/Python

  

Language/Rust

  

Needs Langver

We can't get to this until we implement language versioning

  

OS/Linux

Affects specifically Lix on Linux

  

OS/macOS

Affects specifically Lix on macOS

  

performance

make lix go faster

  

regression

This is a regression since some previous version of Lix

  

release-blocker

Blocks public release

  

stability

Fixing this makes the software more stable

  

Status

blocked

Blocked on something

  

Status

invalid

not our bug, duplicate, similar

  

Status

postponed

closed but should maybe look at later (generally with S-wontfix)

  

Status

wontfix

We chose not to change this (see issue comments for more detail).

  

testing

Tests that should be added

  

testing/flakey

Tests that are unreliable/flakey (not to be confused with flakes that test)

  

Topic/Large Scale Installations

Large scale installations of Lix, e.g. NixOS Hydra, Lix CI, big corporate installations etc.

  

ux

makes the user experience better :)

No labels

Affects/CppNix

Affects/Nightly

Affects/Only nightly

Affects/Stable

Area/build-packaging

Area/cli

Area/evaluator

Area/fetching

Area/flakes

Area/language

Area/lix ci

Area/nix-eval-jobs

Area/profiles

Area/protocol

Area/releng

Area/remote-builds

Area/repl

Area/repl/debugger

Area/store

bug

Context

contributors

Context

drive-by

Context

maintainers

Context

RFD

crash 💥

Cross Compilation

devx

docs

Downstream Dependents

E/easy

E/hard

E/help wanted

E/reproducible

E/requires rearchitecture

Feature/S3

imported

Language/Bash

Language/C++

Language/NixLang

Language/Python

Language/Rust

Needs Langver

OS/Linux

OS/macOS

performance

regression

release-blocker

stability

Status

blocked

Status

invalid

Status

postponed

Status

wontfix

testing

testing/flakey

Topic/Large Scale Installations

ux

Milestone

Clear milestone

No items

No milestone

2.93

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

3 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

lix-project/lix#811

No description provided.