bernardo/Nomarchy
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: disable Nix sandbox so Stylix IFD can realize sources
Some checks failed
Check / eval-and-lint (push) Failing after 1m3s
Details

Browse Source 
flake check evaluates the home-manager fontconfig text, which via
Stylix/base16.nix does import-from-derivation — eval must realize fetched
`-source` paths. The single-user Nix in the runner container can't set up
the build sandbox (no user namespaces), so realization failed with
"path '…-source' is not valid". Set sandbox = false for the runner
(safe in a throwaway CI container).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Bernardo Magri
2026-05-29 22:05:12 +01:00
parent da5e5cf2aa
commit f24d49be08
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.gitea/workflows/check.yml
View File

@@ -28,10 +28,16 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
# Flakes for every `nix` invocation in the job (the bare `nix flake # Flakes for every `nix` invocation in the job (the bare `nix flake
# check` below relies on this; the scripts pass the flag themselves). # check` below relies on this; the scripts pass the flag themselves).
# NIX_SSL_CERT_FILE because we add nix to PATH without sourcing the # sandbox=false because Stylix/base16.nix do import-from-derivation —
# installer's profile (which is what normally exports it). # eval realizes fetched `-source` paths mid-check, and the single-user
# Nix in this container can't set up the build sandbox (no user
# namespaces), which otherwise surfaces as "path '…-source' is not
# valid". NIX_SSL_CERT_FILE because we add nix to PATH without sourcing
# the installer's profile (which is what normally exports it).
env: env:
NIX_CONFIG: "experimental-features = nix-command flakes" NIX_CONFIG: |
experimental-features = nix-command flakes
sandbox = false
NIX_SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt NIX_SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt
steps: steps:
- name: Checkout - name: Checkout