Allow insecure packages in flake.nix

jtojnar · October 28, 2023, 4:59pm

Just replace

nixpkgs.legacyPackages.${system}

with

(import nixpkgs {
  inherit system;
  config = {
    permittedInsecurePackages = [
      "foo"
    ];
  };
})

That is basically how legacyPackages are defined in Nixpkgs:

github.com

NixOS/nixpkgs/blob/cf830f7890e3fc59d352f0a28775d161c57c0dd6/flake.nix#L56


      
          
          
# The "legacy" in `legacyPackages` doesn't imply that the packages exposed
          # through this attribute are "legacy" packages. Instead, `legacyPackages`
          # is used here as a substitute attribute name for `packages`. The problem
          # with `packages` is that it makes operations like `nix flake show
          # nixpkgs` unusably slow due to the sheer number of packages the Nix CLI
          # needs to evaluate. But when the Nix CLI sees a `legacyPackages`
          # attribute it displays `omitted` instead of evaluating all packages,
          # which keeps `nix flake show` on Nixpkgs reasonably fast, though less
          # information rich.
          legacyPackages = forAllSystems (system: import ./. { inherit system; });
          
          
nixosModules = {
            notDetected = ./nixos/modules/installer/scan/not-detected.nix;
          
          
  /*
              Make the `nixpkgs.*` configuration read-only. Guarantees that `pkgs`
              is the way you initialize it.
          
          
    Example:

Though see the discussion in Using nixpkgs.legacyPackages.${system} vs import for caveats.