How can I delete sensitive information copied into `/nix/store` by flake?

waffle8946 · November 9, 2024, 8:36pm

Well they’re using flakes, even plain ol’ direnv will (incidentally) create a gc root for those:

direnv/direnv/blob/aa761e3944cf47751596b2082f2a3c9d33c5aeba/stdlib.sh#L1316-L1322


      
          use_flake() {
            watch_file flake.nix
            watch_file flake.lock
            mkdir -p "$(direnv_layout_dir)"
            eval "$(nix --extra-experimental-features "nix-command flakes" print-dev-env --profile "$(direnv_layout_dir)/flake-profile" "$@")"
            nix --extra-experimental-features "nix-command flakes" profile wipe-history --profile "$(direnv_layout_dir)/flake-profile"
          }