nix-installer

What's Changed

• Update to Nix 2.24.7 by @edolstra in https://github.com/DeterminateSystems/nix-installer/pull/1184
• Fixup release test matrix re: dnixd by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1186
• Release v0.26.2 by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1185

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.26.1...v0.26.2

This release resolves a race condition and instability when running determinate-nixd login right after startup.

What's Changed

• Updated dnixd by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1178
• Release v0.26.1 by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1180

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.26.0...v0.26.1

macOS Sequoia

Apple's new macOS version, Sequoia, conflicts with most existing installations of Nix.
This release includes a repair sequoia command that fixes the issue.

Before upgrading to Sequoia, Nix users should run the repair tool:

curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix/tag/v0.26.0 | sh -s -- repair sequoia --move-existing-users

Running the repair tool after upgrading to Sequoia will work, too, but Nix will not work until after the repair tool is run.

Who needs to run the repair tool?

Nix users on macOS who installed Nix with the upstream Nix installer, or Determinate Nix Installer v0.22.0 and older.
Run /nix/nix-installer --version to identify the Determinate Nix Installer version used on your system.

The repair tool is safe to run, even if you installed with a Determinate Nix Installer version newer than v0.22.0.

Caveat for advanced users

Users who customized their Nix build users should read the help output of the repair sequoia command by passing the --help flag.

Why is this repair tool required?

macOS Sequoia creates users with UniqueIDs that conflict with Nix's _nixbldN (i.e. _nixbld1) users.
When upgrading to Sequoia, macOS's update tool deletes the conflicting users.

More information

For more information, see the upstream Nix tracking issue: https://github.com/NixOS/nix/issues/10892

What's Changed

• PlaceNixConfiguration: fix --extra-conf handling of extra-trusted-substituters and extra-trusted-public-keys by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1145
• nixd.determinate-nixd.socket: Let systemd create the socket's parent directories by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1151
• CreateDirectory: use /sbin/mount on macOS by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1162
• Retry launchctl bootstrap, launchctl bootout, and launchctl kickstart a few times by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1146
• repair: add sequoia subcommand that can migrate build users to the new 351+ UID range by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1143
• Explicitly pass 'daemon' to determinate-nixd by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1159
• Release v0.26.0 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1163

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.25.0...v0.26.0

What's Changed

• Wait longer for /nix to exist on macOS by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1141
• Update to Nix 2.24.6 by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1152
• Release v0.25.0 by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1153

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.24.0...v0.25.0

This release contains the Nix version bump to 2.24.5, which includes a fix for the issue we mentioned in the release notes for https://github.com/DeterminateSystems/nix-installer/releases/tag/v0.23.0 (a regression in substituting store paths with many dependencies, https://github.com/NixOS/nix/issues/11387).

What's Changed

• Update Nix to 2.24.5 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1136
• Release v0.24.0 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1137

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.23.0...v0.24.0

This release has a couple important-to-note changes:

• It changes the installed-by-default Nix version back to 2.23.3 due an observed regression in substitution. For more information, see the upstream bug report: https://github.com/NixOS/nix/issues/11387.
• All new macOS installations will now have a build GID of 350 and build UIDs that start at 351 (for nixbld1), in order to be robust against the upcoming macOS Sequoia update. Work is still in progress on implementing a migration helper for existing pre-Sequoia macOS installations; stay tuned for more information.

What's Changed

• Move determinate-nixd to /usr/local/bin/determinate-nixd on Linux by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1120
• Synchronize macOS UIDs and GIDs with upstream scripts to prepare for Sequoia by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1123
• Update and unify limits across systemd and macOS. by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1126
• Print the nix-installer version when it runs by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1127
• Bring LimitNOFILE back down to 1024 * 1024 due to the performance impact of too many FDs by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1128
• Update flake inputs, downgrade Nix to 2.23.3 due to curl issues by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1129
• Update cargo deps by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1130
• Release v0.23.0 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1131

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.22.0...v0.23.0

What's Changed

• Update determinate-nixd by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1109
• Update nix 2 24 4 by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1110
• Update cargo dependencies by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1111
• release v0.22.0 by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1112

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.21.0...v0.22.0

This release has a few important-to-note changes:

• It removes support for i686-linux (see https://determinate.systems/posts/nix-installer-i686-linux/)
• It bumps the installed-by-default Nix version to 2.24.3
• It is the first release with the --determinate flag. For more details, see: https://determinate.systems/nix

What's Changed

• Drop a ton of target_os based cfg's to allow more tests and clippies to be caught cross-platform by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1058
• Add troubleshooting doc by @lucperkins in https://github.com/DeterminateSystems/nix-installer/pull/1037
• Distribute Determinate Nix by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1003
• --determinate fixups by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1068
• Update cache pubkeys by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1076
• In the plan json, specify the action name for every action by @noamraph in https://github.com/DeterminateSystems/nix-installer/pull/1061
• flesh out some further deployment integration by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1081
• Test --determinate in CI, and fix integration issues by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1084
• Update deps by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1090
• Remove support for i686-linux by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1093
• fixup: socket enablement on older systemd versions by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1094
• Properly fixup socket enablement on older systemd versions by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1095
• Upgrade Nix to 2.24.3 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1100
• setup_default_profile: don't substitute by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1101
• fixup: add Service= to determinate-nixd.socket by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1102
• Add --determinate container and VM tests by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1103
• Release v0.21.0 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1091

New Contributors

• @noamraph made their first contribution in https://github.com/DeterminateSystems/nix-installer/pull/1061

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.20.2...v0.21.0

This patch release release improves macOS 15 beta fresh install support by handling the case where reading the current system version from SystemVersion.plist returns the compatibility version 10.16, instead of 15.0.

A huge thank you to @ratbag98 for their assistance in narrowing down the issue and testing out various approaches to resolve the problem!

What's Changed

• Work around macOS compatibility SystemVersion.plist by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1046

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.20.1...v0.20.2

This release includes preliminary support for the macOS 15 beta, by relocating the build user UIDs into the 450-499 range. This will only be useful for fresh installations.

What's Changed

• add missing SELinux directives by @kbknapp in https://github.com/DeterminateSystems/nix-installer/pull/1031
• Prefer launchtl's bootstrap / bootout by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/1033
• Preliminary support for macOS 15 beta by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1038
• Upgrade Nix to 2.23.3 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1039
• Update dependencies by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1040
• Release v0.20.1 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1042

New Contributors

• @kbknapp made their first contribution in https://github.com/DeterminateSystems/nix-installer/pull/1031

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.20.0...v0.20.1

This release bumps the installed-by-default Nix version to 2.23.1, addressing CVE-2024-38531 (https://github.com/NixOS/nix/security/advisories/GHSA-q82p-44mg-mgh5).

What's Changed

• Allow the 'nix' input to point to the Nix repo by @edolstra in https://github.com/DeterminateSystems/nix-installer/pull/1013
• Run shellcheck on nix-installer.sh by @lucperkins in https://github.com/DeterminateSystems/nix-installer/pull/995
• Upgrade to Nix 2.23.1 (CVE-2024-38531) by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1022
• Update dependencies by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/1023

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.19.1...v0.20.0

This release includes a couple of improvements:

1. On all targets, we bundle the default Nix version we install into the installer binary itself.
2. On macOS, we give a better error message when a device policy would prevent mounting the internal Nix Store volume we want to create.

What's Changed

• Embedding the Nix installer in the binary. by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/897
• Error on SUIS by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/941

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.18.0...v0.19.0

This release includes some more work towards supporting installing over existing installations (see https://github.com/DeterminateSystems/nix-installer/issues/126 for more information on our curing effort). Specifically, an existing /etc/nix/nix.conf file will no longer be a hard error[^1] and will instead be merged with the settings that we desire.

It also fixes a few bugs, like a typo in a permissions check (checking a file had a mode of 664 instead of 644), a macOS installation bug that affected some setups (see https://github.com/DeterminateSystems/nix-installer/issues/295 and https://github.com/DeterminateSystems/nix-installer/pull/298 for more information), and explicitly erroring on WSL1 as unsupported.

If you rely on us as a library, the change that will impact you the most is that we made all of our error enums #[non_exhaustive], so that adding new variants in the future won't require a new major version.

The diagnostics report also saw a slight rework to be somewhat more useful in actually diagnosing issues. A diagnostic report now looks like this:

{
  "version": "0.5.0",
  "planner": "linux",
  "configured_settings": [
    "modify_profile"
  ],
  "os_name": "Ubuntu",
  "os_version": "22.04.1 LTS (Jammy Jellyfish)",
  "triple": "x86_64-unknown-linux-musl",
  "is_ci": false,
  "action": "Install",
  "status": "Failure",
  "failure_chain": [
    "Action(\"configure_nix\")",
    "Child(\"place_nix_configuration\")",
    "Child(\"create_directory\")",
    "CreateDirectory(\"/etc/nix\")"
  ]
}

What's Changed

• Describe Diagnostics by @grahamc in https://github.com/DeterminateSystems/nix-installer/pull/276
• Use 0o644 for files, not 0o664 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/278
• Update default nix_package_url to Nix 2.13.3 by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/279
• Add newline to end of plan json output by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/283
• Use launchctl load -w on macOS by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/298
• Detect WSL1 and error by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/297
• Make errors non-exhaustive by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/299
• Add more failure context / Improve error structure by @Hoverbear in https://github.com/DeterminateSystems/nix-installer/pull/296
• Update some dependencies by @Hoverbear in https://github.com/DeterminateSystems/nix-installer/pull/303
• Integrate nix-config-parser by @cole-h in https://github.com/DeterminateSystems/nix-installer/pull/263

Full Changelog: https://github.com/DeterminateSystems/nix-installer/compare/v0.4.0...v0.5.0

[^1]: Currently, only experimental-features will be merged (please file an issue if you would like to see other options supported!); any other conflict between our desired settings and an existing nix.conf will still cause an error. In other words, if the setting is not one that we are trying to set (see the list here: https://github.com/DeterminateSystems/nix-installer/blob/v0.5.0/src/action/common/place_nix_configuration.rs#L32-L45), it will be seamlessly merged into the resulting nix.conf file.