build: allow releases.nixos.org in restricted-eval
Nix's hydra.nix pins nixpkgs via a tarball on releases.nixos.org. Without this URI prefix in allowed-uris, restricted-mode evaluation rejects the fetch and all jobs in the jobset fail.
Jörg Thalheim committed
Apr 20, 2026 at 23:35 UTC
9cab89306e305c280bcf4e62f0a92272a5e8adab
1 file changed
+1
-1
build/common.nix
+1
-1
@@ -64,7 +64,7 @@
64
65
nix.extraOptions = ''
66
allowed-impure-host-deps = /etc/protocols /etc/services /etc/nsswitch.conf
67
- allowed-uris = https://github.com/ https://git.savannah.gnu.org/ github:
67
+ allowed-uris = https://github.com/ https://git.savannah.gnu.org/ github: https://releases.nixos.org/
68
'';
69
70
# we use networkd