nixpkgs: use full_index=1 when fetching patches, for stable hashes

This commit is contained in:
2024-07-31 20:52:38 +00:00
parent 397b2ae2ea
commit bf45206d1a

View File

@@ -15,7 +15,9 @@ let
else if saneCommit != null then
"https://git.uninsane.org/colin/nixpkgs/commit/${saneCommit}.diff"
else
"https://github.com/NixOS/nixpkgs/commit/${nixpkgsCommit}.patch"
# XXX(2024-07-31): full_index=1 for reproducibility (prevent patch hashes from spontaneously changing)
# - <https://github.com/NixOS/nixpkgs/issues/257446#issuecomment-1736563091>
"https://github.com/NixOS/nixpkgs/commit/${nixpkgsCommit}.patch?full_index=1"
;
in fetchpatch2 (
{ inherit revert url; }
@@ -41,7 +43,7 @@ in
title = "python312Packages.contourpy: fix cross compilation";
prUrl = "https://github.com/NixOS/nixpkgs/pull/328218";
saneCommit = "74a003b0af9820f6f7c6c62b3d2bec6df3a8d7b8";
hash = "sha256-PV/dkmTXr31Du8OwSaKwe2B0RibNs8r8v7UxLZ4IXYQ=";
hash = "sha256-DQC3OkW8zROfr9Y/nu0Bx5CrNtPpL5CBnf/4KQFuzGc=";
})
(fetchpatch' {
@@ -53,7 +55,7 @@ in
(fetchpatch' {
title = "nixos/networkmanager: split ModemManager bits into own module";
prUrl = "https://github.com/NixOS/nixpkgs/pull/316824";
hash = "sha256-RWCZaEb6E+PZnYtqfIh3kAbcGIMKsHhdlOdupJrpw7w=";
hash = "sha256-woQijOvFaUj2qw5RNngY+F3hcJKihf4/c6C6/Y6mlL4=";
# saneCommit = "23bfba9b76757ffc00fc2be810009dcf92e2eaf2";
# hash = "sha256-cn6ihwO3MyzdpVoJoQNKAHyo8GuGvFP6vr//7r9pzjE=";
})
@@ -61,7 +63,7 @@ in
(fetchpatch' {
title = "hickory-dns: rename from trust-dns";
prUrl = "https://github.com/NixOS/nixpkgs/pull/316466";
hash = "sha256-9bnvkK7nC8d9OHwCKW05OxhSV6kNIHKg2AkYVUud1Vw=";
hash = "sha256-aEqXvFj2OxUbrVsu+sCLND/Mv41gj3obv3mkB9NSbt0=";
})
(fetchpatch' {
@@ -85,14 +87,14 @@ in
# required for gpodder to build
title = "python311Packages.mygpoclient: 1.8 -> 1.9";
prUrl = "https://github.com/NixOS/nixpkgs/pull/324734";
hash = "sha256-2maFCPpR8AdW+baRHF8QhigHN5mDqKiFKz84wBfIvu8=";
hash = "sha256-sKxxYvaZ1W70H4+xZW5f54MTd4NSP3wnc0RGF4VBZ6M=";
})
(fetchpatch' {
# see: <https://github.com/NixOS/nixpkgs/pull/284562#issuecomment-2079104081>
title = "nixos/lemmy: fix nginx backend to proxy needed headers";
prUrl = "https://github.com/NixOS/nixpkgs/pull/306984";
hash = "sha256-53X4ssdp02C8NOUL5mlbhR7qwE9/KWp6iLmz1ljJopE=";
hash = "sha256-cRvnMCF7XaW+5+5eLMC8Gem16suV/t4qKB3vGyrhGxo=";
saneCommit = "bd87a38b86f889a6902a356ab415eeead881766b";
})