jiebi/CodeConvo huggingface dataset:
Change:
NetworkManager dropped support but the unbound module still sets , leading to the following warning in the syslog: and check the syslog The unbound module should set the correct value (which i don't know to be honest). See <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I missed that the unbound module sets the option, I'll drop that in another pr. As to the question you asked about being able to use unbound with networkmanager, I'm afraid you cant because upstream doesn't support that anymore and if you want support regarding this ask in the freedesktop community spaces.
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Thank you!
No worries. thanks for pointing it out.

Discussion:
resolvconf = { useLocalResolver = mkDefault true; }; <del> networkmanager.dns = "unbound"; </del> }; environment.etc."unbound/unbound.conf".source = confFile;
Change:
Steps to reproduce the behavior: from Seems like it's not compatible with Kernel 6.8 Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
same here on . running
Hi this issue has been resolved on the NixOS / nixpkgs distribution. I would suggest you open an issue on Canonical's issue tracker for the Ubuntu/Kubuntu distributions.

Discussion:
stdenv.mkDerivation { pname = "v4l2loopback"; <del> version = "unstable-2023-11-23-${kernel.version}"; </del> <ins> version = "0.12.7-unstable-2024-02-12-${kernel.version}"; </ins> src = fetchFromGitHub { owner = "umlaeute"; repo = "v4l2loopback"; <del> rev = "850a2e36849f6ad3c9bf74f2ae3f603452bd8a71"; hash = "sha256-LqP5R3oKbjUQUfDZUWpkrmyopWhOt4wlgSgGywTPJXM="; </del> <ins> rev = "5d72c17f92ee0e38efbb7eb85e34443ecbf1a80c"; hash = "sha256-ggmYH5MUXhMPvA8UZ2EAG+eGoPTNbw7B8UxmmgP6CsE="; </ins> }; hardeningDisable = [ "format" "pic" ];

<del> diff --git a/v4l2loopback.c b/v4l2loopback.c index 2ab1f76..2514f09 100644 --- a/v4l2loopback.c +++ b/v4l2loopback.c @@ -92,17 +92,6 @@ MODULE_LICENSE("GPL"); }                                                       } while (0) -/* TODO: Make sure that function is never interrupted. */ -static inline int mod_inc(int *number, int mod) -{ -	int result; -	result = (*number + 1) % mod; -	if (unlikely(result < 0)) -		result += mod; -	*number = result; -	return result; -} - static inline void v4l2l_get_timestamp(struct v4l2_buffer *b) { /* ktime_get_ts is considered deprecated, so use ktime_get_ts64 if possible */ @@ -1424,8 +1413,9 @@ static int vidioc_reqbufs(struct file *file, void *fh, i = dev->write_position; list_for_each_entry(pos, &dev->outbufs_list, list_head) { -				dev->bufpos2index[mod_inc(&i, b->count)] = +				dev->bufpos2index[i % b->count] = pos->buffer.index; +				++i; } } @@ -1489,9 +1479,10 @@ static void buffer_written(struct v4l2_loopback_device *dev, del_timer_sync(&dev->timeout_timer); spin_lock_bh(&dev->lock); -	dev->bufpos2index[mod_inc(&dev->write_position, dev->used_buffers)] = +	dev->bufpos2index[dev->write_position % dev->used_buffers] = buf->buffer.index; list_move_tail(&buf->list_head, &dev->outbufs_list); +	++dev->write_position; dev->reread_count = 0; check_timers(dev); @@ -1586,7 +1577,8 @@ static int get_capture_buffer(struct file *file) if (dev->write_position > opener->read_position + dev->used_buffers) opener->read_position = dev->write_position - 1; -		pos = mod_inc(&opener->read_position, dev->used_buffers); +		pos = opener->read_position % dev->used_buffers; +		++opener->read_position; } timeout_happened = dev->timeout_happened; dev->timeout_happened = 0; </del>
Change:
Steps to reproduce the behavior: on any platform () n/a Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Broken by .
Ping (author), (committer).
might fix it? Will test when I'm home tonight.
Can confirm that it will fix this.
Yes, because part of is reverting the offending commit.

Discussion:
hardening_unsupported_flags+=" relro bindnow" '' <ins> + optionalString (libc != null && targetPlatform.isAvr) '' for isa in avr5 avr3 avr4 avr6 avr25 avr31 avr35 avr51 avrxmega2 avrxmega4 avrxmega5 avrxmega6 avrxmega7 tiny-stack; do echo "-L${getLib libc}/avr/lib/$isa" >> $out/nix-support/libc-cflags done '' </ins> + optionalString stdenv.targetPlatform.isDarwin '' echo "-arch ${targetPlatform.darwinArch}" >> $out/nix-support/libc-ldflags ''

hardening_unsupported_flags+=" stackprotector" '' <ins> + optionalString (libc != null && targetPlatform.isAvr) '' for isa in avr5 avr3 avr4 avr6 avr25 avr31 avr35 avr51 avrxmega2 avrxmega4 avrxmega5 avrxmega6 avrxmega7 tiny-stack; do echo "-B${getLib libc}/avr/lib/$isa" >> $out/nix-support/libc-crt1-cflags done '' </ins> + optionalString stdenv.targetPlatform.isDarwin '' echo "-arch ${targetPlatform.darwinArch}" >> $out/nix-support/cc-cflags ''

passthru = { incdir = "/avr/include"; <del> libdir = "/avr/lib"; </del> }; meta = with lib; {
Change:
I live on nixpkgs-unstable and this gives me an error: cc
damn sorry about that, I reviewed too quickly, didn't saw the hash hadn't been updated. Also I looked at my shell history, I did try to build it, though with the wrong nixpkgs revision :sweat: (I ran instead of ). I should have just use . I'll submit a fix!
No problems, thanks! I've basically signed up for this kinds of bugs when I've decided to use nixpkgs-unstable

Discussion:
publisher = "github"; name = "copilot-chat"; version = "0.14.2024030801"; # compatible with vscode >= 1.87 <del> sha256 = "sha256-4ArWVFko2T6ze/i+HTdXAioWC7euWCycDsQxFTrEtUw="; </del> <ins> sha256 = "sha256-v9RS+pEEQzq2t0EY/gVTTfIwRlGmIuIq2qCockDpsn8="; </ins> }; meta = { description = "GitHub Copilot Chat is a companion extension to GitHub Copilot that houses experimental chat features";
Change:
Project description The habamax theme for vim. Metadata homepage URL: source URL: license: None platforms: unix, linux, darwin Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:

Discussion:
meta.homepage = "https://github.com/ludovicchabant/vim-gutentags/"; }; <ins> vim-habamax = buildVimPlugin { pname = "vim-habamax"; version = "2024-01-22"; src = fetchFromGitHub { owner = "habamax"; repo = "vim-habamax"; rev = "8b4e045b711c7e90235a601ba2a923cdfacb2f46"; sha256 = "02973qssq450d4411zjscsjvwz4fc2lpqvimah06k87skp8inp47"; }; meta.homepage = "https://github.com/habamax/vim-habamax/"; }; </ins> vim-hardtime = buildVimPlugin { pname = "vim-hardtime"; version = "2022-05-06";

https://github.com/lifepillar/vim-gruvbox8/,, https://github.com/brennanfee/vim-gui-position/,, https://github.com/ludovicchabant/vim-gutentags/,, <ins> https://github.com/habamax/vim-habamax/,HEAD, </ins> https://github.com/takac/vim-hardtime/,, https://github.com/chkno/vim-haskell-module-name/,, https://github.com/enomsg/vim-haskellConcealPlus/,,
Change:
Steps to reproduce the behavior: xone <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I am not able to build either, but my error looks diffrent:
I’ll take a look later today. The released version of xone is quite old at this point. And probably has some incompatibility with newer kernels. Development of it has picked up in the last couple of months. Can probably grab some of the newer patches to fix it
I tried the latest commit from the xone repository using this file to build and seemed to work properly.
Can anyone bump the xone version then?
IDK how the versioning should be. There is no new official release since Jun 20, 2022.
You can use the master branch and set the sha256 value. The Version number is then the date of the commit you use. an example how this work ist here:
Now it happens on NixOS 23.11 as well when using the latest kernel. Can be backported?

Discussion:
{ stdenv, lib, fetchFromGitHub, kernel, fetchurl, fetchpatch }: <del> stdenv.mkDerivation rec { </del> <ins> stdenv.mkDerivation (finalAttrs: { </ins> pname = "xone"; <del> version = "0.3"; </del> <ins> version = "0.3-unstable-2024-03-16"; </ins> src = fetchFromGitHub { owner = "medusalix"; <del> repo = pname; rev = "refs/tags/v${version}"; sha256 = "sha256-h+j4xCV9R6hp9trsv1NByh9m0UBafOz42ZuYUjclILE="; </del> <ins> repo = "xone"; rev = "948d2302acdd6333295eaba4da06d96677290ad3"; hash = "sha256-srAEw1ai5KT0rmVUL3Dut9R2mNb00AAZVCcINikh2sM="; </ins> }; <del> patches = [ # Fix build on kernel 6.3 (fetchpatch { name = "kernel-6.3.patch"; url = "https://github.com/medusalix/xone/commit/bbf0dcc484c3f5611f4e375da43e0e0ef08f3d18.patch"; hash = "sha256-A2OzRRk4XT++rS6k6EIyiPy/LJptvVRUxoP7CIGrPWU="; }) ]; </del> setSourceRoot = '' <del> export sourceRoot=$(pwd)/${src.name} </del> <ins> export sourceRoot=$(pwd)/${finalAttrs.src.name} </ins> ''; nativeBuildInputs = kernel.moduleBuildDependencies;

"-C" "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build" "M=$(sourceRoot)" <del> "VERSION=${version}" </del> <ins> "VERSION=${finalAttrs.version}" </ins> ]; buildFlags = [ "modules" ];
Change:
When using unbound, the option in Can this be to the unbound module, so that this option is set by default if unbound is set to enabled? Or is this a bad idea? Maybe this is more relevant now after the support for unbound has been by NetworkManager. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
uhm not sure, I'm not the unbound maintainer. I think you want to talk to: (btw would you mind adding yourself as module maintainer you did most of the recent work on it from skimming through the commit log)
I don't think should be something by module. Perhaps it should be set when is set to true in the module?
cc :seenoevil:
o no. Unfortunate timing.

Discussion:
resolvconfOptions = cfg.extraOptions ++ optional cfg.dnsSingleRequest "single-request" <del> ++ optional cfg.dnsExtensionMechanism "edns0"; </del> <ins> ++ optional cfg.dnsExtensionMechanism "edns0" ++ optional cfg.useLocalResolver "trust-ad"; </ins> configText = ''
Change:
In with KDE Plasma 6 you'll get an error when trying to open a repository. Steps to reproduce the behavior: plasma6 with (Wayland or X11 doesn't matter) in nixos-unstable in Gittyup to open a repository error dialog Directory picker allows choosing directory. ! No maintainers. removed himself. Maybe is this something you want to get involved in? <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Workaround: Run on the CLI.
This seems to effect many different QT apps, including qgroundcontrol, virtualbox, and openscad.
Oh, then maybe this really is something the mighty might be interested in!
Are those Qt5 apps? They probably need to have kio (and maybe also kio-extras) as a dependency.
Gittyup looks like a Qt5 app, and it's using QFileDialog for opening the directory dialog.
I tried with both libs, and it worked, thank you very much. I'll test with just kio too.
kio alone was enough, I created
Please test
Can people here test please?
I'm pretty new to nix, I understand I'd need to use flakes to test that?
I just tested this under Wayland with Plasma6 and a fresh reboot. Still works great, thank you!

Discussion:
breeze.qt5 plasma-integration.qt5 pkgs.plasma5Packages.kwayland-integration <ins> pkgs.plasma5Packages.kio </ins> kio-extras-kf5 ] # Optional hardware support features
Change:
Package name: opencsg Latest released version: 1.6.0 Current version on the unstable channel: 1.4.2 Current version on the stable/release channel: 1.4.2 Notify maintainers Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:

Discussion:
, qmake, GLUT, fixDarwinDylibNames }: stdenv.mkDerivation rec { <del> version = "1.4.2"; </del> <ins> version = "1.6.0"; </ins> pname = "opencsg"; src = fetchurl { url = "http://www.opencsg.org/OpenCSG-${version}.tar.gz"; <del> sha256 = "1ysazynm759gnw1rdhn9xw9nixnzrlzrc462340a6iif79fyqlnr"; </del> <ins> hash = "sha256-v4+4Dj4M4R2H3XjdFaDehy27iXLYf1+Jz/xGHvrUe+g="; </ins> }; nativeBuildInputs = [ qmake ]

doCheck = false; <del> patches = [ ./fix-pro-files.patch ]; </del> preConfigure = '' rm example/Makefile src/Makefile qmakeFlags=("''${qmakeFlags[@]}" "INSTALLDIR=$out") ''; postInstall = '' <del> install -D license.txt "$out/share/doc/opencsg/license.txt" </del> <ins> install -D copying.txt "$out/share/doc/opencsg/copying.txt" </ins> '' + lib.optionalString stdenv.isDarwin '' mkdir -p $out/Applications mv $out/bin/*.app $out/Applications

homepage = "http://www.opencsg.org/"; platforms = platforms.unix; maintainers = [ maintainers.raskin ]; <del> license = licenses.gpl2; </del> <ins> license = licenses.gpl2Plus; </ins> }; }

<del> diff -ur OpenCSG-1.4.2-pristine/example/example.pro OpenCSG-1.4.2/example/example.pro --- OpenCSG-1.4.2-pristine/example/example.pro	2016-09-27 06:11:16.000000000 +0900 +++ OpenCSG-1.4.2/example/example.pro	2019-05-07 10:45:18.785251737 +0900 @@ -6,7 +6,9 @@ INCLUDEPATH += ../include LIBS += -L../lib -lopencsg -lGLEW -INSTALLDIR = /usr/local +isEmpty(INSTALLDIR) { +  INSTALLDIR = /usr/local +} INSTALLS += target target.path = $$INSTALLDIR/bin diff -ur OpenCSG-1.4.2-pristine/opencsg.pro OpenCSG-1.4.2/opencsg.pro --- OpenCSG-1.4.2-pristine/opencsg.pro	2016-09-27 06:11:16.000000000 +0900 +++ OpenCSG-1.4.2/opencsg.pro	2019-05-07 10:44:50.578698165 +0900 @@ -1,2 +1,3 @@ TEMPLATE = subdirs SUBDIRS  = src example +CONFIG   += ordered </del>
Change:
python39 can't be installed Steps to reproduce the behavior: vim python39 to system packages section environment.systemPackages = with pkgs; [ python39 ]; nixos-rebuild switch after executing command Please run and paste the result.
Could you check ?
Reproduces for , does not reproduce for . Given this info and the error itself, I think this will be fixed by backporting python/cpython. I can test this hypothesis and write up a PR in the next few hours.

Discussion:
inherit src; name = "python${pythonVersion}-${version}-doc"; <ins> patches = optionals (pythonAtLeast "3.9" && pythonOlder "3.10") [ # https://github.com/python/cpython/issues/98366 (fetchpatch { url = "https://github.com/python/cpython/commit/5612471501b05518287ed61c1abcb9ed38c03942.patch"; hash = "sha256-p41hJwAiyRgyVjCVQokMSpSFg/VDDrqkCSxsodVb6vY="; }) ]; </ins> dontConfigure = true; dontBuild = true;
Change:
Project description The Proton Mail desktop application has been released as a beta in the .deb file format and is a mail client for the Proton Mail. Metadata homepage URL: source URL: license: unfree (couldn't find any license clearly stated) platforms: Linux and Darwin Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
See
they seem to claim it is gpl3:

Discussion:
github = "rski"; githubId = 2960312; }; <ins> rsniezek = { email = "radoslaw.sniezek@protonmail.com"; github = "rsniezek"; githubId = 19433256; name = "Radoslaw Sniezek"; }; </ins> rsynnest = { email = "contact@rsynnest.com"; github = "rsynnest";

<ins> { lib , stdenv , fetchurl , makeWrapper , dpkg , electron }: let mainProgram = "proton-mail"; in stdenv.mkDerivation rec { pname = "protonmail-desktop"; version = "1.0.1"; src = fetchurl { url = "https://github.com/ProtonMail/inbox-desktop/releases/download/v${version}/proton-mail_${version}_amd64.deb"; hash = "sha256-fNK//x3DOsynWSkG9N+nZ3wjYoC+RreaYVC6KEDXh4w="; }; dontConfigure = true; dontBuild = true; nativeBuildInputs = [ dpkg makeWrapper ]; installPhase = '' runHook preInstall mkdir -p $out cp -r usr/share/ $out/ cp -r usr/lib/proton-mail/resources/app.asar $out/share/ runHook postInstall ''; preFixup = '' makeWrapper ${lib.getExe electron} $out/bin/${mainProgram}  --add-flags $out/share/app.asar  --add-flags "''${NIXOS_OZONE_WL:+''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations}}"  --set-default ELECTRON_FORCE_IS_PACKAGED 1  --set-default ELECTRON_IS_DEV 0  --inherit-argv0 ''; meta = with lib; { description = "Desktop application for Mail and Calendar, made with Electron"; homepage = "https://github.com/ProtonMail/inbox-desktop"; license = licenses.gpl3Plus; maintainers = with maintainers; [ rsniezek sebtm ]; platforms = [ "x86_64-linux" ]; sourceProvenance = with sourceTypes; [ binaryNativeCode ]; inherit mainProgram; }; } </ins>
Change:
Steps to reproduce the behavior: gurobi Moreover has been released, if it possible to update. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Thank you Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:

Discussion:
getdp = callPackage ../applications/science/math/getdp { }; <del> gurobi = callPackage ../applications/science/math/gurobi { }; </del> <ins> gurobi = callPackage ../applications/science/math/gurobi { python3 = python310; }; </ins> jags = callPackage ../applications/science/math/jags { };
Change:
The build attribute of the last state of the package contains a expression to substitute tool names with its Nix packages. The scrip substitutes with the git package, which includes and similar regex used in the script. Script : Packaged script in my nix store: Steps to reproduce the behavior: the package and inspect its output The regex keys aren't substituted by the git binaries store location. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:

Discussion:
-e "s,buniqb,${coreutils}/bin/uniq,"  -e "s,bcolumnb,${util-linux}/bin/column,"  -e "s,bfzf-tmuxb,${fzf}/bin/fzf-tmux,"  <del> -e "/display-message/!s,bgitb,${git}/bin/git,g"  </del> -e "s,bgrepb,${gnugrep}/bin/grep,"  -e "s,bsedb,${gnused}/bin/sed,"  -e "/fzf-tmux/!s,btmuxb,${tmux}/bin/tmux,"  -e "s,bxargsb,${findutils}/bin/xargs,"  -e "s,bxdg-openb,${xdg-utils}/bin/xdg-open,"  <ins> -e "/display-message|fzf-git-$o-widget|burl=|$remote_url =~ /!s,bgitb,${git}/bin/git,g"  </ins> -e "s,__fzf_git=.*BASH_SOURCE.*,__fzf_git=$out/share/${pname}/fzf-git.sh,"  -e "/__fzf_git=.*readlink.*/d"  fzf-git.sh
Change:
After compiling wireshark in a nix-shell, if you try to run the binary, it can't find libwscodec, a wireshark-specific library. I solved it in an overlay via: but I dunno if it's the correct way to solve it in the derivation ? nixos- (Impala) nix version: nix-env (Nix) 1.11.15 Nixpkgs version: "" sandboxing disabled
You mean running the binary from the build tree without ? That's probably an upstream problem (or rather, works as designed).
Yes. I just run buildPhase then i run the "build/run/wireshark" binary. I haven't developed in a long time for wireshark but it suddenly came back to me that you have to do (see ) It's a bit unpractical and not completely foolproof as it doesn't find other libraries too but it doesn't stop the main binary from running. Problem solved. My bad.

Discussion:
enableParallelBuilding = true; <ins> shellHook = '' # to be able to run the resulting binary export WIRESHARK_RUN_FROM_BUILD_DIRECTORY=1 ''; </ins> meta = with stdenv.lib; { homepage = https://www.wireshark.org/; description = "Powerful network protocol analyzer";
Change:
I in total 173 profiles to and now after booting, only around 100 connections are known to . Steps to reproduce the behavior: a lot of connections configured over All connections are available. All 173 connections are available in the folder By manually triggering a all missing profiles are loaded. I noticed that the connections are missing which stand at the end of the script . This I find weird, as at the end of the script stands <details<summaryOutput after reboot</summary</details<details<summaryOutput after 'sudo nmcli connection reload'</summary</details- Suspecting a race condition during boot, here are syslogs of a boot with 173 connections and of of a boot with 4 connections <details<summary173 connections (connections missing)</summary</details<details<summary4 connections (everything works fine)</summary</details<details<summaryMeld difference of the logs</summary! </detailsOfficial maintainers in the meta: teams.freedesktop.members From git blame: Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Hey, I'll try to debug this soon-ish
stupid question, try adding and see if that fixes your problem.
yes that fixed it :+1: could have tried this myself :seenoevil: maybe this should be automatically set with ensureProfiles?
Yeah I'll do a pr, should have done it the first time around :seenoevil:

Discussion:
description = "Ensure that NetworkManager declarative profiles are created"; wantedBy = [ "multi-user.target" ]; before = [ "network-online.target" ]; <ins> after = [ "NetworkManager.service" ]; </ins> script = let path = id: "/run/NetworkManager/system-connections/${id}.nmconnection"; in ''

${pkgs.envsubst}/bin/envsubst -i ${ini.generate (lib.escapeShellArg profile.n) profile.v} > ${path (lib.escapeShellArg profile.n)} '') (lib.mapAttrsToList (n: v: { inherit n v; }) cfg.ensureProfiles.profiles) + '' <del> if systemctl is-active --quiet NetworkManager; then ${pkgs.networkmanager}/bin/nmcli connection reload fi </del> <ins> ${pkgs.networkmanager}/bin/nmcli connection reload </ins> ''; serviceConfig = { EnvironmentFile = cfg.ensureProfiles.environmentFiles;
Change:
The installer test was broken by the change mentioned below, along with the change which adds a keepVisudo option to the package build of sudo. The installer tests do not have network connectivity, therefore requiring that all packages be located on the iso from which they are being installed. The problem is that this patch forces one of the installed sudo derivations to differ from the default, forcing nix to attempt a rebuild of the derivation and subsequently failing to download the sudo sources. We need to either bundle both versions of the sudo derivation or simply remove the keepVisudo option and always keep it Is it a problem to keep visudo around for the default sudo derivation? Broken in:

Discussion:
{src = pkgs.writeText "sudoers-in" cfg.configFile; } # Make sure that the sudoers file is syntactically valid. # (currently disabled - NIXOS-66) <del> "${pkgs.sudoWithVisudo}/sbin/visudo -f $src -c && </del> <ins> "${pkgs.sudo}/sbin/visudo -f $src -c && </ins> cp $src $out"; target = "sudoers"; mode = "0440";

isoImage.storeContents = [ pkgs.glibcLocales pkgs.sudo <del> pkgs.sudoWithVisudo </del> pkgs.docbook5 pkgs.docbook5_xsl pkgs.grub

<del> { stdenv, fetchurl, coreutils, pam, groff, keepVisudo ? false }: </del> <ins> { stdenv, fetchurl, coreutils, pam, groff }: </ins> stdenv.mkDerivation rec { <del> name = "sudo-1.8.9p4"; </del> <ins> name = "sudo-1.8.10p3"; </ins> src = fetchurl { urls = [ "ftp://ftp.sudo.ws/pub/sudo/${name}.tar.gz" "ftp://ftp.sudo.ws/pub/sudo/OLD/${name}.tar.gz" ]; <del> sha256 = "19y75bsh4z2kid5jk2r84z7rvmnh90n8cb9fbn9l4rcw83lzjhqr"; </del> <ins> sha256 = "002l6h27pnhb77b65frhazbhknsxvrsnkpi43j7i0qw1lrgi7nkf"; </ins> }; postConfigure = ''

enableParallelBuilding = true; postInstall = '' <del> # ‘visudo’ does not make sense on NixOS - except for checking sudoers # file syntax rm ${if keepVisudo then "" else "$out/sbin/visudo"}  $out/share/man/man8/visudo.8 </del> rm $out/share/doc/sudo/ChangeLog '';

sudo = callPackage ../tools/security/sudo { }; <del> sudoWithVisudo = sudo.override { keepVisudo = true; }; </del> suidChroot = builderDefsPackage (import ../tools/system/suid-chroot) { }; super = callPackage ../tools/security/super { };