Delan Azabani
b2944d93a6
We previously allowed you to map any flake URL to any other flake URL,
including shorthand flakerefs, indirect flake URLs like `flake:nixpkgs`,
direct flake URLs like `github:NixOS/nixpkgs`, or local paths.
But flake registry entries mapping from direct flake URLs often come
from swapping the 'from' and 'to' arguments by accident, and even when
created intentionally, they may not actually work correctly.
This patch rejects those URLs (and fully-qualified flake: URLs), making
it harder to swap the arguments by accident.
Fixes #181.
Change-Id: I24713643a534166c052719b8770a4edfcfdb8cf3
550 lines
18 KiB
Bash
550 lines
18 KiB
Bash
source ./common.sh
|
|
|
|
requireGit
|
|
|
|
clearStore
|
|
rm -rf $TEST_HOME/.cache $TEST_HOME/.config
|
|
|
|
flake1Dir=$TEST_ROOT/flake1
|
|
flake2Dir=$TEST_ROOT/flake2
|
|
flake3Dir=$TEST_ROOT/flake3
|
|
flake5Dir=$TEST_ROOT/flake5
|
|
flake7Dir=$TEST_ROOT/flake7
|
|
nonFlakeDir=$TEST_ROOT/nonFlake
|
|
badFlakeDir=$TEST_ROOT/badFlake
|
|
flakeGitBare=$TEST_ROOT/flakeGitBare
|
|
|
|
for repo in $flake1Dir $flake2Dir $flake3Dir $flake7Dir $nonFlakeDir; do
|
|
# Give one repo a non-main initial branch.
|
|
extraArgs=
|
|
if [[ $repo == $flake2Dir ]]; then
|
|
extraArgs="--initial-branch=main"
|
|
fi
|
|
|
|
createGitRepo "$repo" "$extraArgs"
|
|
done
|
|
|
|
createSimpleGitFlake $flake1Dir
|
|
|
|
cat > $flake2Dir/flake.nix <<EOF
|
|
{
|
|
description = "Fnord";
|
|
|
|
outputs = { self, flake1 }: rec {
|
|
packages.$system.bar = flake1.packages.$system.foo;
|
|
};
|
|
}
|
|
EOF
|
|
|
|
git -C $flake2Dir add flake.nix
|
|
git -C $flake2Dir commit -m 'Initial'
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
description = "Fnord";
|
|
|
|
outputs = { self, flake2 }: rec {
|
|
packages.$system.xyzzy = flake2.packages.$system.bar;
|
|
|
|
checks = {
|
|
xyzzy = packages.$system.xyzzy;
|
|
};
|
|
};
|
|
}
|
|
EOF
|
|
|
|
cat > $flake3Dir/default.nix <<EOF
|
|
{ x = 123; }
|
|
EOF
|
|
|
|
git -C $flake3Dir add flake.nix default.nix
|
|
git -C $flake3Dir commit -m 'Initial'
|
|
|
|
cat > $nonFlakeDir/README.md <<EOF
|
|
FNORD
|
|
EOF
|
|
|
|
git -C $nonFlakeDir add README.md
|
|
git -C $nonFlakeDir commit -m 'Initial'
|
|
|
|
# Construct a custom registry, additionally test the --registry flag
|
|
nix registry add --registry $registry flake1 git+file://$flake1Dir
|
|
nix registry add --registry $registry flake2 git+file://$flake2Dir
|
|
nix registry add --registry $registry flake3 git+file://$flake3Dir
|
|
nix registry add --registry $registry flake4 flake3
|
|
nix registry add --registry $registry nixpkgs flake1
|
|
|
|
# Test 'nix registry list'.
|
|
[[ $(nix registry list | wc -l) == 5 ]]
|
|
nix registry list | grep '^global'
|
|
nix registry list | grepInverse '^user' # nothing in user registry
|
|
|
|
# Test fuzzy and exact flake attribute syntax.
|
|
expectStderr 1 nix eval flake1#ERROR | grepQuiet "error:.*does not provide attribute.*or 'ERROR'$"
|
|
expectStderr 1 nix eval flake1#.ERROR | grepQuiet "error:.*does not provide attribute 'ERROR'$"
|
|
|
|
# Test 'nix flake metadata'.
|
|
nix flake metadata flake1
|
|
nix flake metadata flake1 | grepQuiet 'Locked URL:.*flake1.*'
|
|
|
|
# Test 'nix flake metadata' on a local flake.
|
|
(cd $flake1Dir && nix flake metadata) | grepQuiet 'URL:.*flake1.*'
|
|
(cd $flake1Dir && nix flake metadata .) | grepQuiet 'URL:.*flake1.*'
|
|
nix flake metadata $flake1Dir | grepQuiet 'URL:.*flake1.*'
|
|
|
|
# Test 'nix flake metadata --json'.
|
|
json=$(nix flake metadata flake1 --json | jq .)
|
|
[[ $(echo "$json" | jq -r .description) = 'Bla bla' ]]
|
|
[[ -d $(echo "$json" | jq -r .path) ]]
|
|
[[ $(echo "$json" | jq -r .lastModified) = $(git -C $flake1Dir log -n1 --format=%ct) ]]
|
|
hash1=$(echo "$json" | jq -r .revision)
|
|
|
|
echo foo > $flake1Dir/foo
|
|
git -C $flake1Dir add $flake1Dir/foo
|
|
[[ $(nix flake metadata flake1 --json --refresh | jq -r .dirtyRevision) == "$hash1-dirty" ]]
|
|
|
|
echo -n '# foo' >> $flake1Dir/flake.nix
|
|
flake1OriginalCommit=$(git -C $flake1Dir rev-parse HEAD)
|
|
git -C $flake1Dir commit -a -m 'Foo'
|
|
flake1NewCommit=$(git -C $flake1Dir rev-parse HEAD)
|
|
hash2=$(nix flake metadata flake1 --json --refresh | jq -r .revision)
|
|
[[ $(nix flake metadata flake1 --json --refresh | jq -r .dirtyRevision) == "null" ]]
|
|
[[ $hash1 != $hash2 ]]
|
|
|
|
# Test 'nix build' on a flake.
|
|
nix build -o $TEST_ROOT/result flake1#foo
|
|
[[ -e $TEST_ROOT/result/hello ]]
|
|
|
|
# Test packages.default.
|
|
nix build -o $TEST_ROOT/result flake1
|
|
[[ -e $TEST_ROOT/result/hello ]]
|
|
|
|
nix build -o $TEST_ROOT/result $flake1Dir
|
|
nix build -o $TEST_ROOT/result git+file://$flake1Dir
|
|
|
|
# Check that store symlinks inside a flake are not interpreted as flakes.
|
|
nix build -o $flake1Dir/result git+file://$flake1Dir
|
|
nix path-info $flake1Dir/result
|
|
|
|
# 'getFlake' on an unlocked flakeref should fail in pure mode, but
|
|
# succeed in impure mode.
|
|
(! nix build -o $TEST_ROOT/result --expr "(builtins.getFlake \"$flake1Dir\").packages.$system.default")
|
|
nix build -o $TEST_ROOT/result --expr "(builtins.getFlake \"$flake1Dir\").packages.$system.default" --impure
|
|
|
|
# 'getFlake' on a locked flakeref should succeed even in pure mode.
|
|
nix build -o $TEST_ROOT/result --expr "(builtins.getFlake \"git+file://$flake1Dir?rev=$hash2\").packages.$system.default"
|
|
|
|
# Building a flake with an unlocked dependency should fail in pure mode.
|
|
(! nix build -o $TEST_ROOT/result flake2#bar --no-registries)
|
|
(! nix build -o $TEST_ROOT/result flake2#bar --no-use-registries)
|
|
(! nix eval --expr "builtins.getFlake \"$flake2Dir\"")
|
|
|
|
# But should succeed in impure mode.
|
|
(! nix build -o $TEST_ROOT/result flake2#bar --impure)
|
|
nix build -o $TEST_ROOT/result flake2#bar --impure --no-write-lock-file
|
|
nix eval --expr "builtins.getFlake \"$flake2Dir\"" --impure
|
|
|
|
# Building a local flake with an unlocked dependency should fail with --no-update-lock-file.
|
|
expect 1 nix build -o $TEST_ROOT/result $flake2Dir#bar --no-update-lock-file 2>&1 | grep 'requires lock file changes'
|
|
|
|
# But it should succeed without that flag.
|
|
nix build -o $TEST_ROOT/result $flake2Dir#bar --no-write-lock-file
|
|
expect 1 nix build -o $TEST_ROOT/result $flake2Dir#bar --no-update-lock-file 2>&1 | grep 'requires lock file changes'
|
|
nix build -o $TEST_ROOT/result $flake2Dir#bar --commit-lock-file
|
|
[[ -e $flake2Dir/flake.lock ]]
|
|
[[ -z $(git -C $flake2Dir diff main || echo failed) ]]
|
|
|
|
# Rerunning the build should not change the lockfile.
|
|
nix build -o $TEST_ROOT/result $flake2Dir#bar
|
|
[[ -z $(git -C $flake2Dir diff main || echo failed) ]]
|
|
|
|
# Building with a lockfile should not require a fetch of the registry.
|
|
nix build -o $TEST_ROOT/result --flake-registry file:///no-registry.json $flake2Dir#bar --refresh
|
|
nix build -o $TEST_ROOT/result --no-registries $flake2Dir#bar --refresh
|
|
nix build -o $TEST_ROOT/result --no-use-registries $flake2Dir#bar --refresh
|
|
|
|
# Updating the flake should not change the lockfile.
|
|
nix flake lock $flake2Dir
|
|
[[ -z $(git -C $flake2Dir diff main || echo failed) ]]
|
|
|
|
# Now we should be able to build the flake in pure mode.
|
|
nix build -o $TEST_ROOT/result flake2#bar
|
|
|
|
# Or without a registry.
|
|
nix build -o $TEST_ROOT/result --no-registries git+file://$flake2Dir#bar --refresh
|
|
nix build -o $TEST_ROOT/result --no-use-registries git+file://$flake2Dir#bar --refresh
|
|
|
|
# Test whether indirect dependencies work.
|
|
nix build -o $TEST_ROOT/result $flake3Dir#xyzzy
|
|
git -C $flake3Dir add flake.lock
|
|
|
|
# Add dependency to flake3.
|
|
rm $flake3Dir/flake.nix
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
description = "Fnord";
|
|
|
|
outputs = { self, flake1, flake2 }: rec {
|
|
packages.$system.xyzzy = flake2.packages.$system.bar;
|
|
packages.$system."sth sth" = flake1.packages.$system.foo;
|
|
};
|
|
}
|
|
EOF
|
|
|
|
git -C $flake3Dir add flake.nix
|
|
git -C $flake3Dir commit -m 'Update flake.nix'
|
|
|
|
# Check whether `nix build` works with an incomplete lockfile
|
|
nix build -o $TEST_ROOT/result $flake3Dir#"sth sth"
|
|
nix build -o $TEST_ROOT/result $flake3Dir#"sth%20sth"
|
|
|
|
# Check whether it saved the lockfile
|
|
[[ -n $(git -C $flake3Dir diff master) ]]
|
|
|
|
git -C $flake3Dir add flake.lock
|
|
|
|
git -C $flake3Dir commit -m 'Add lockfile'
|
|
|
|
# Test whether registry caching works.
|
|
nix registry list --flake-registry file://$registry | grepQuiet flake3
|
|
mv $registry $registry.tmp
|
|
nix store gc
|
|
nix registry list --flake-registry file://$registry --refresh | grepQuiet flake3
|
|
mv $registry.tmp $registry
|
|
|
|
# Test whether flakes are registered as GC roots for offline use.
|
|
# FIXME: use tarballs rather than git.
|
|
rm -rf $TEST_HOME/.cache
|
|
nix store gc # get rid of copies in the store to ensure they get fetched to our git cache
|
|
_NIX_FORCE_HTTP=1 nix build -o $TEST_ROOT/result git+file://$flake2Dir#bar
|
|
mv $flake1Dir $flake1Dir.tmp
|
|
mv $flake2Dir $flake2Dir.tmp
|
|
nix store gc
|
|
_NIX_FORCE_HTTP=1 nix build -o $TEST_ROOT/result git+file://$flake2Dir#bar
|
|
_NIX_FORCE_HTTP=1 nix build -o $TEST_ROOT/result git+file://$flake2Dir#bar --refresh
|
|
mv $flake1Dir.tmp $flake1Dir
|
|
mv $flake2Dir.tmp $flake2Dir
|
|
|
|
# Add nonFlakeInputs to flake3.
|
|
rm $flake3Dir/flake.nix
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs = {
|
|
flake1 = {};
|
|
flake2 = {};
|
|
nonFlake = {
|
|
url = git+file://$nonFlakeDir;
|
|
flake = false;
|
|
};
|
|
nonFlakeFile = {
|
|
url = path://$nonFlakeDir/README.md;
|
|
flake = false;
|
|
};
|
|
nonFlakeFile2 = {
|
|
url = "$nonFlakeDir/README.md";
|
|
flake = false;
|
|
};
|
|
};
|
|
|
|
description = "Fnord";
|
|
|
|
outputs = inputs: rec {
|
|
packages.$system.xyzzy = inputs.flake2.packages.$system.bar;
|
|
packages.$system.sth = inputs.flake1.packages.$system.foo;
|
|
packages.$system.fnord =
|
|
with import ./config.nix;
|
|
mkDerivation {
|
|
inherit system;
|
|
name = "fnord";
|
|
dummy = builtins.readFile (builtins.path { name = "source"; path = ./.; filter = path: type: baseNameOf path == "config.nix"; } + "/config.nix");
|
|
dummy2 = builtins.readFile (builtins.path { name = "source"; path = inputs.flake1; filter = path: type: baseNameOf path == "simple.nix"; } + "/simple.nix");
|
|
buildCommand = ''
|
|
cat \${inputs.nonFlake}/README.md > \$out
|
|
[[ \$(cat \${inputs.nonFlake}/README.md) = \$(cat \${inputs.nonFlakeFile}) ]]
|
|
[[ \${inputs.nonFlakeFile} = \${inputs.nonFlakeFile2} ]]
|
|
'';
|
|
};
|
|
};
|
|
}
|
|
EOF
|
|
|
|
cp ../config.nix $flake3Dir
|
|
|
|
git -C $flake3Dir add flake.nix config.nix
|
|
git -C $flake3Dir commit -m 'Add nonFlakeInputs'
|
|
|
|
# Check whether `nix build` works with a lockfile which is missing a
|
|
# nonFlakeInputs.
|
|
nix build -o $TEST_ROOT/result $flake3Dir#sth --commit-lock-file
|
|
# check that the commit message is broadly correct. we can't check for
|
|
# exact contents of the message becase the build dirs change too much.
|
|
[[ "$(git -C $flake3Dir show -s --format=format:%B)" = \
|
|
"flake.lock: Update
|
|
|
|
Flake lock file updates:
|
|
|
|
"?" Added input 'nonFlake':
|
|
'git+file://"*"/flakes/flakes/nonFlake?ref=refs/heads/master&rev="*"' "*"
|
|
"?" Added input 'nonFlakeFile':
|
|
'path:"*"/flakes/flakes/nonFlake/README.md?lastModified="*"&narHash=sha256-cPh6hp48IOdRxVV3xGd0PDgSxgzj5N/2cK0rMPNaR4o%3D' "*"
|
|
"?" Added input 'nonFlakeFile2':
|
|
'path:"*"/flakes/flakes/nonFlake/README.md?lastModified="*"&narHash=sha256-cPh6hp48IOdRxVV3xGd0PDgSxgzj5N/2cK0rMPNaR4o%3D' "* ]]
|
|
|
|
nix build -o $TEST_ROOT/result flake3#fnord
|
|
[[ $(cat $TEST_ROOT/result) = FNORD ]]
|
|
|
|
# Check whether flake input fetching is lazy: flake3#sth does not
|
|
# depend on flake2, so this shouldn't fail.
|
|
rm -rf $TEST_HOME/.cache
|
|
clearStore
|
|
mv $flake2Dir $flake2Dir.tmp
|
|
mv $nonFlakeDir $nonFlakeDir.tmp
|
|
nix build -o $TEST_ROOT/result flake3#sth
|
|
(! nix build -o $TEST_ROOT/result flake3#xyzzy)
|
|
(! nix build -o $TEST_ROOT/result flake3#fnord)
|
|
mv $flake2Dir.tmp $flake2Dir
|
|
mv $nonFlakeDir.tmp $nonFlakeDir
|
|
nix build -o $TEST_ROOT/result flake3#xyzzy flake3#fnord
|
|
|
|
# Test doing multiple `lookupFlake`s
|
|
nix build -o $TEST_ROOT/result flake4#xyzzy
|
|
|
|
# Test 'nix flake update' and --override-flake.
|
|
nix flake lock $flake3Dir
|
|
[[ -z $(git -C $flake3Dir diff master || echo failed) ]]
|
|
|
|
nix flake update --flake "$flake3Dir" --override-flake flake2 nixpkgs
|
|
[[ ! -z $(git -C "$flake3Dir" diff master || echo failed) ]]
|
|
|
|
# Make branch "removeXyzzy" where flake3 doesn't have xyzzy anymore
|
|
git -C $flake3Dir checkout -b removeXyzzy
|
|
rm $flake3Dir/flake.nix
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs = {
|
|
nonFlake = {
|
|
url = "$nonFlakeDir";
|
|
flake = false;
|
|
};
|
|
};
|
|
|
|
description = "Fnord";
|
|
|
|
outputs = { self, flake1, flake2, nonFlake }: rec {
|
|
packages.$system.sth = flake1.packages.$system.foo;
|
|
packages.$system.fnord =
|
|
with import ./config.nix;
|
|
mkDerivation {
|
|
inherit system;
|
|
name = "fnord";
|
|
buildCommand = ''
|
|
cat \${nonFlake}/README.md > \$out
|
|
'';
|
|
};
|
|
};
|
|
}
|
|
EOF
|
|
nix flake lock $flake3Dir
|
|
git -C $flake3Dir add flake.nix flake.lock
|
|
git -C $flake3Dir commit -m 'Remove packages.xyzzy'
|
|
git -C $flake3Dir checkout master
|
|
|
|
# Test whether fuzzy-matching works for registry entries.
|
|
(! nix build -o $TEST_ROOT/result flake4/removeXyzzy#xyzzy)
|
|
nix build -o $TEST_ROOT/result flake4/removeXyzzy#sth
|
|
|
|
# Testing the nix CLI
|
|
nix registry add flake1 flake3
|
|
[[ $(nix registry list | wc -l) == 6 ]]
|
|
nix registry pin flake1
|
|
[[ $(nix registry list | wc -l) == 6 ]]
|
|
nix registry pin flake1 flake3
|
|
[[ $(nix registry list | wc -l) == 6 ]]
|
|
nix registry remove flake1
|
|
[[ $(nix registry list | wc -l) == 5 ]]
|
|
|
|
# 'nix registry add' should accept flake shorthands (with or without branch or rev)
|
|
# in the from argument, but reject fully-qualified from-urls (direct or indirect).
|
|
nix registry add nixpkgz github:NixOS/nixpkgz
|
|
nix registry remove nixpkgz
|
|
nix registry add nixpkgz/branch github:NixOS/nixpkgz
|
|
nix registry remove nixpkgz/branch
|
|
nix registry add nixpkgz/branch/1db42b7fe3878f3f5f7a4f2dc210772fd080e205 github:NixOS/nixpkgz
|
|
nix registry remove nixpkgz/branch/1db42b7fe3878f3f5f7a4f2dc210772fd080e205
|
|
! nix registry add flake:nixpkgz github:NixOS/nixpkgz
|
|
! nix registry add github:NixOS/nixpkgz github:NixOS/nixpkgz
|
|
|
|
# Test 'nix registry list' with a disabled global registry.
|
|
nix registry add user-flake1 git+file://$flake1Dir
|
|
nix registry add user-flake2 git+file://$flake2Dir
|
|
[[ $(nix --flake-registry "" registry list | wc -l) == 2 ]]
|
|
nix --flake-registry "" registry list | grepQuietInverse '^global' # nothing in global registry
|
|
nix --flake-registry "" registry list | grepQuiet '^user'
|
|
nix registry remove user-flake1
|
|
nix registry remove user-flake2
|
|
[[ $(nix registry list | wc -l) == 5 ]]
|
|
|
|
# Test 'nix flake clone'.
|
|
rm -rf $TEST_ROOT/flake1-v2
|
|
nix flake clone flake1 --dest $TEST_ROOT/flake1-v2
|
|
[ -e $TEST_ROOT/flake1-v2/flake.nix ]
|
|
|
|
# Test 'follows' inputs.
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs.foo = {
|
|
type = "indirect";
|
|
id = "flake1";
|
|
};
|
|
inputs.bar.follows = "foo";
|
|
|
|
outputs = { self, foo, bar }: {
|
|
};
|
|
}
|
|
EOF
|
|
|
|
nix flake lock $flake3Dir
|
|
[[ $(jq -c .nodes.root.inputs.bar $flake3Dir/flake.lock) = '["foo"]' ]]
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs.bar.follows = "flake2/flake1";
|
|
|
|
outputs = { self, flake2, bar }: {
|
|
};
|
|
}
|
|
EOF
|
|
|
|
nix flake lock $flake3Dir
|
|
[[ $(jq -c .nodes.root.inputs.bar $flake3Dir/flake.lock) = '["flake2","flake1"]' ]]
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs.bar.follows = "flake2";
|
|
|
|
outputs = { self, flake2, bar }: {
|
|
};
|
|
}
|
|
EOF
|
|
|
|
nix flake lock $flake3Dir
|
|
[[ $(jq -c .nodes.root.inputs.bar $flake3Dir/flake.lock) = '["flake2"]' ]]
|
|
|
|
# Test overriding inputs of inputs.
|
|
writeTrivialFlake $flake7Dir
|
|
git -C $flake7Dir add flake.nix
|
|
git -C $flake7Dir commit -m 'Initial'
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs.flake2.inputs.flake1 = {
|
|
type = "git";
|
|
url = file://$flake7Dir;
|
|
};
|
|
|
|
outputs = { self, flake2 }: {
|
|
};
|
|
}
|
|
EOF
|
|
|
|
nix flake lock $flake3Dir
|
|
[[ $(jq .nodes.flake1.locked.url $flake3Dir/flake.lock) =~ flake7 ]]
|
|
|
|
cat > $flake3Dir/flake.nix <<EOF
|
|
{
|
|
inputs.flake2.inputs.flake1.follows = "foo";
|
|
inputs.foo.url = git+file://$flake7Dir;
|
|
|
|
outputs = { self, flake2 }: {
|
|
};
|
|
}
|
|
EOF
|
|
|
|
nix flake update --flake "$flake3Dir"
|
|
[[ $(jq -c .nodes.flake2.inputs.flake1 "$flake3Dir/flake.lock") =~ '["foo"]' ]]
|
|
[[ $(jq .nodes.foo.locked.url "$flake3Dir/flake.lock") =~ flake7 ]]
|
|
|
|
# Test git+file with bare repo.
|
|
rm -rf $flakeGitBare
|
|
git clone --bare $flake1Dir $flakeGitBare
|
|
nix build -o $TEST_ROOT/result git+file://$flakeGitBare
|
|
|
|
# Test path flakes.
|
|
mkdir -p $flake5Dir
|
|
writeDependentFlake $flake5Dir
|
|
nix flake lock path://$flake5Dir
|
|
|
|
# Test tarball flakes.
|
|
tar cfz $TEST_ROOT/flake.tar.gz -C $TEST_ROOT flake5
|
|
|
|
nix build -o $TEST_ROOT/result file://$TEST_ROOT/flake.tar.gz
|
|
|
|
# Building with a tarball URL containing a SRI hash should also work.
|
|
url=$(nix flake metadata --json file://$TEST_ROOT/flake.tar.gz | jq -r .url)
|
|
[[ $url =~ sha256- ]]
|
|
|
|
nix build -o $TEST_ROOT/result $url
|
|
|
|
# Building with an incorrect SRI hash should fail.
|
|
expectStderr 102 nix build -o $TEST_ROOT/result "file://$TEST_ROOT/flake.tar.gz?narHash=sha256-qQ2Zz4DNHViCUrp6gTS7EE4+RMqFQtUfWF2UNUtJKS0=" | grep 'NAR hash mismatch'
|
|
|
|
# Test --override-input.
|
|
git -C $flake3Dir reset --hard
|
|
nix flake lock $flake3Dir --override-input flake2/flake1 file://$TEST_ROOT/flake.tar.gz -vvvvv
|
|
[[ $(jq .nodes.flake1_2.locked.url $flake3Dir/flake.lock) =~ flake.tar.gz ]]
|
|
|
|
nix flake lock $flake3Dir --override-input flake2/flake1 flake1
|
|
[[ $(jq -r .nodes.flake1_2.locked.rev $flake3Dir/flake.lock) =~ $hash2 ]]
|
|
|
|
nix flake lock $flake3Dir --override-input flake2/flake1 flake1/master/$hash1
|
|
[[ $(jq -r .nodes.flake1_2.locked.rev $flake3Dir/flake.lock) =~ $hash1 ]]
|
|
|
|
nix flake lock $flake3Dir
|
|
[[ $(jq -r .nodes.flake1_2.locked.rev $flake3Dir/flake.lock) = $hash1 ]]
|
|
|
|
# Test updating an individual input of a flake lockfile.
|
|
nix flake update flake2/flake1 --flake "$flake3Dir"
|
|
[[ $(jq -r .nodes.flake1_2.locked.rev "$flake3Dir/flake.lock") =~ $hash2 ]]
|
|
|
|
# Test updating multiple inputs.
|
|
nix flake lock "$flake3Dir" --override-input flake1 flake1/master/$hash1
|
|
nix flake lock "$flake3Dir" --override-input flake2/flake1 flake1/master/$hash1
|
|
[[ $(jq -r .nodes.flake1.locked.rev "$flake3Dir/flake.lock") =~ $hash1 ]]
|
|
[[ $(jq -r .nodes.flake1_2.locked.rev "$flake3Dir/flake.lock") =~ $hash1 ]]
|
|
|
|
nix flake update flake1 flake2/flake1 --flake "$flake3Dir"
|
|
[[ $(jq -r .nodes.flake1.locked.rev "$flake3Dir/flake.lock") =~ $hash2 ]]
|
|
[[ $(jq -r .nodes.flake1_2.locked.rev "$flake3Dir/flake.lock") =~ $hash2 ]]
|
|
|
|
# Test 'nix flake metadata --json'.
|
|
nix flake metadata $flake3Dir --json | jq .
|
|
|
|
# Test flake in store does not evaluate.
|
|
rm -rf $badFlakeDir
|
|
mkdir $badFlakeDir
|
|
echo INVALID > $badFlakeDir/flake.nix
|
|
nix store delete $(nix store add-path $badFlakeDir)
|
|
|
|
[[ $(nix path-info $(nix store add-path $flake1Dir)) =~ flake1 ]]
|
|
[[ $(nix path-info path:$(nix store add-path $flake1Dir)) =~ simple ]]
|
|
|
|
# Test fetching flakerefs in the legacy CLI.
|
|
[[ $(nix-instantiate --eval flake:flake3 -A x) = 123 ]]
|
|
[[ $(nix-instantiate --eval flake:git+file://$flake3Dir -A x) = 123 ]]
|
|
[[ $(nix-instantiate -I flake3=flake:flake3 --eval '<flake3>' -A x) = 123 ]]
|
|
[[ $(NIX_PATH=flake3=flake:flake3 nix-instantiate --eval '<flake3>' -A x) = 123 ]]
|
|
|
|
# Test alternate lockfile paths.
|
|
nix flake lock $flake2Dir --output-lock-file $TEST_ROOT/flake2.lock
|
|
cmp $flake2Dir/flake.lock $TEST_ROOT/flake2.lock >/dev/null # lockfiles should be identical, since we're referencing flake2's original one
|
|
|
|
nix flake lock $flake2Dir --output-lock-file $TEST_ROOT/flake2-overridden.lock --override-input flake1 git+file://$flake1Dir?rev=$flake1OriginalCommit
|
|
expectStderr 1 cmp $flake2Dir/flake.lock $TEST_ROOT/flake2-overridden.lock
|
|
nix flake metadata $flake2Dir --reference-lock-file $TEST_ROOT/flake2-overridden.lock | grepQuiet $flake1OriginalCommit
|
|
|
|
# reference-lock-file can only be used if allow-dirty is set.
|
|
expectStderr 1 nix flake metadata $flake2Dir --no-allow-dirty --reference-lock-file $TEST_ROOT/flake2-overridden.lock
|