Skip to content

ci: pin nix run nixpkgs to the flake's nixpkgs - #2644

Queued
mmlb wants to merge 1 commit into
developfrom
push-rvsxyokxxvkt
Queued

mmlb wants to merge 1 commit into
developfrom
push-rvsxyokxxvkt

Conversation

@mmlb

@mmlb mmlb commented Nov 12, 2026

Copy link
Copy Markdown
Collaborator

What kind of change does this PR introduce?

Gardening

What is the current behavior?

A bunch of workflows use nix run nixpkgs#... which does not guarantee what revision of nixpkgs is used to fetch those tools. This nixpkgs is very likely not the nixpkgs we use in the flake so gets fetched from upstream binary cache.

What is the new behavior?

Tools are pulled in from the nixpkgs revision we use in the repo. So every run uses the same version until nixpkgs is changed. We also use the same version of tools outside of nix builds as in. We now also get nixpkgs from our s3 binary cache and share it with any later nix invocations. Overall better usage of nix.

Bare `nix run nixpkgs#...` pulls the latest nixpkgs from the registry.
That can differ from run to run, and it costs an extra download.

Add `--inputs-from .` so these calls use the nixpkgs pinned in
flake.lock, as the qemu build step already does.

Assisted-by: Claude <noreply@anthropic.com>
@mmlb
mmlb requested a review from a team as a code owner November 12, 2026 19:48
@github-actions

Copy link
Copy Markdown

Package version diff: none (aarch64-linux, x86_64-linux)

@mmlb
mmlb enabled auto-merge November 12, 2026 19:53
@mmlb
mmlb added this pull request to the merge queue Nov 12, 2026
Any commits made after this event will not be merged.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants