chore: pin nix to 2.23
A security issue currently plagues nix_git package, along with some other issues cropping up in the newer versions. So we'll stick to the last stable, bug-free nix version for a while. Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
This commit is contained in:
parent
11b0bf7522
commit
25ecb1c367
@ -4,8 +4,7 @@
|
|||||||
lib,
|
lib,
|
||||||
pkgs,
|
pkgs,
|
||||||
...
|
...
|
||||||
}:
|
}: {
|
||||||
{
|
|
||||||
options.snowflake.core.nix = {
|
options.snowflake.core.nix = {
|
||||||
enable = lib.mkEnableOption "Enable core nix configuration";
|
enable = lib.mkEnableOption "Enable core nix configuration";
|
||||||
};
|
};
|
||||||
@ -28,7 +27,10 @@
|
|||||||
nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
|
nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
|
||||||
|
|
||||||
# Use the latest, unstable version of nix.
|
# Use the latest, unstable version of nix.
|
||||||
package = pkgs.nixVersions.git;
|
package = pkgs.nixVersions.nix_2_23;
|
||||||
|
# TODO: switch back to nix git. Current version has a security issue that allows
|
||||||
|
# remote code execution.
|
||||||
|
# package = pkgs.nixVersions.git;
|
||||||
|
|
||||||
settings = {
|
settings = {
|
||||||
# Accept flake configuration without prompting.
|
# Accept flake configuration without prompting.
|
||||||
|
Loading…
Reference in New Issue
Block a user