mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:46 +01:00
ryan4yin | 二花
8f065f24bc
Nix 2.35 brings lazy flake source copying, mimalloc (5-12% faster evaluation), lower nix-daemon memory use, HTTP/3 support, and jittered transfer retries with Retry-After.
50 lines
1.9 KiB
Nix
50 lines
1.9 KiB
Nix
{ lib, pkgs, ... }:
|
|
{
|
|
# Nix 2.35 is newer than nixpkgs' nixVersions.stable (still 2.34), so opt into
|
|
# the latest released version until stable catches up.
|
|
# https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/tools/package-management/nix/default.nix
|
|
nix.package = pkgs.nixVersions.latest;
|
|
|
|
# https://lix.systems/add-to-config/
|
|
# nix.package = pkgs.lix;
|
|
|
|
# to install chrome, you need to enable unfree packages
|
|
nixpkgs.config.allowUnfree = lib.mkDefault true;
|
|
|
|
# do garbage collection weekly to keep disk usage low
|
|
nix.gc = {
|
|
automatic = lib.mkDefault true;
|
|
dates = lib.mkDefault "weekly";
|
|
options = lib.mkDefault "--delete-older-than 7d";
|
|
};
|
|
|
|
# Manual optimise storage: nix-store --optimise
|
|
# https://nixos.org/manual/nix/stable/command-ref/conf-file.html#conf-auto-optimise-store
|
|
nix.settings = {
|
|
auto-optimise-store = true;
|
|
|
|
# Required to run nixpkgs' systemd-nspawn based NixOS tests locally (used
|
|
# by the nixpkgs-review workflow). These are daemon-wide settings, so every
|
|
# local build pays the small uid/cgroup allocation overhead; drop them if
|
|
# you stop running those tests.
|
|
# Reference: https://github.com/NixOS/nixpkgs/pull/478109
|
|
auto-allocate-uids = true;
|
|
extra-system-features = [ "uid-range" ];
|
|
experimental-features = [
|
|
"auto-allocate-uids"
|
|
"cgroups"
|
|
];
|
|
# Use extra-sandbox-paths instead of sandbox-paths here. The plain
|
|
# sandbox-paths setting replaces Nix's compiled sandbox defaults, including
|
|
# the sandbox shell that provides /bin/sh for builders with legacy shebangs.
|
|
# extra-sandbox-paths keeps those defaults and only adds the paths we need.
|
|
# After deploying, verify the effective daemon config with:
|
|
# nix config show | grep sandbox-paths
|
|
extra-sandbox-paths = [
|
|
"/dev/net"
|
|
];
|
|
};
|
|
|
|
nix.channel.enable = false; # remove nix-channel related tools & configs, we use flakes instead.
|
|
}
|