bernardo/Nomarchy
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(install): root-side flake refs must be path:, not git+file

Browse Source 
The chown fix made the flake user-owned, and root's libgit2 then refuses
git+file fetches of it ("not owned by current user") — which silently
killed the seeding step under set -e and would equally break
nixos-install --flake. Use path: refs for the live-side archive and the
nixos-install invocation (path flakes read flake.lock, skip libgit2),
and make seeding failure non-fatal as intended.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Bernardo Magri
2026-06-11 19:39:09 +01:00
parent 1403ea82b2
commit 727f21005d
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkgs/nomarchy-install/nomarchy-install.sh
View File

@@ -425,15 +425,17 @@ section "Installing (this takes a while)"
# `flake archive --to` enforces signatures and locally-evaluated source # `flake archive --to` enforces signatures and locally-evaluated source
# paths have none; plain `nix copy` accepts --no-check-sigs. # paths have none; plain `nix copy` accepts --no-check-sigs.
info "Seeding flake inputs into the target store..." info "Seeding flake inputs into the target store..."
# path: (not git+file) — the flake dir is owned by the target user and
# root's libgit2 refuses repositories owned by someone else.
flake_paths=$(nix --extra-experimental-features "nix-command flakes" \ flake_paths=$(nix --extra-experimental-features "nix-command flakes" \
flake archive --json "$FLAKE_DIR" 2>/dev/null \ flake archive --json "path:$FLAKE_DIR" \
| python3 -c ' | python3 -c '
import json, sys import json, sys
def walk(node): def walk(node):
yield node["path"] yield node["path"]
for child in node.get("inputs", {}).values(): for child in node.get("inputs", {}).values():
yield from walk(child) yield from walk(child)
print("\n".join(walk(json.load(sys.stdin))))') print("\n".join(walk(json.load(sys.stdin))))' || true)
if [[ -n "$flake_paths" ]]; then if [[ -n "$flake_paths" ]]; then
# shellcheck disable=SC2086 # shellcheck disable=SC2086
nix --extra-experimental-features "nix-command flakes" \ nix --extra-experimental-features "nix-command flakes" \
@@ -455,7 +457,7 @@ if [[ ${#NIXOS_INSTALL_OPTS[@]} -gt 0 ]]; then
copy --all --no-check-sigs --to "local?root=/mnt" copy --all --no-check-sigs --to "local?root=/mnt"
fi fi
nixos-install --no-root-passwd "${NIXOS_INSTALL_OPTS[@]}" --flake "$FLAKE_DIR#default" nixos-install --no-root-passwd "${NIXOS_INSTALL_OPTS[@]}" --flake "path:$FLAKE_DIR#default"
success "System installed (bootloader in place)" success "System installed (bootloader in place)"
# Pre-activate the Home Manager generation so the FIRST boot lands in the # Pre-activate the Home Manager generation so the FIRST boot lands in the