nix3-store...t-addressed(1)

📦
version 2.35.3 · 12 versions
, in fedora 44

💖 nix3-store...t-addressed(1) — General Commands Manual 💖

okay bestie, quick heads-up before we dive in: this is the nix store make-content-addressed page from the General Commands Manual, and it's giving experimental energy.

⚠️ Warning — This program is experimental and its interface is subject to change. fr fr, it might get a glow-up without warning you. 🫠

✨ Name ✨

nix store make-content-addressed — rewrite a path or closure to content-addressed form

🌸 Synopsis 🌸

nix store make-content-addressed [option…] installables…

🎀 Examples 🎀

  • Create a content-addressed representation of the closure of GNU Hello:
# nix store make-content-addressed nixpkgs#hello
…
rewrote '/nix/store/10l19qifk7hjjq47px8m2prqk1gv4isy-hello-2.10' to '/nix/store/5skmmcb9svys5lj3kbsrjg7vf2irid63-hello-2.10'

Since the resulting paths are content-addressed, they are always trusted and don’t need signatures to be copied to another store — no cap 🫶:

# nix copy --to /tmp/nix --trusted-public-keys '' /nix/store/5skmmcb9svys5lj3kbsrjg7vf2irid63-hello-2.10

By contrast, the original closure is input-addressed, so it does need signatures to be trusted. watch it just… not:

# nix copy --to /tmp/nix --trusted-public-keys '' nixpkgs#hello
cannot add path '/nix/store/gs7mh6q22l1ivxazxja2mjlsdwhw8zg9-libunistring-0.9.10' because it lacks a signature by a trusted key
  • Create a content-addressed representation of the current NixOS system closure:
# nix store make-content-addressed /run/current-system

💅 Description 💅

This command converts the closure of the store paths specified by installables to content-addressed form. literally its whole job.

Nix store paths are usually input-addressed, meaning that the hash part of the store path is computed from the contents of the derivation (i.e., the build-time dependency graph). Input-addressed paths need to be signed by a trusted key if you want to import them into a store, because we need to trust that the contents of the path were actually built by the derivation. it's a whole trust-fall situation 😭

By contrast, in a content-addressed path, the hash part is computed from the contents of the path. This allows the contents of the path to be verified without any additional information such as signatures. slay, self-verifying. This means that a command like

# nix build /nix/store/5skmmcb9svys5lj3kbsrjg7vf2irid63-hello-2.10 \
    --substituters https://my-cache.example.org

will succeed even if the binary cache https://my-cache.example.org doesn’t present any signatures. iconic behaviour, honestly 👑

⭐ Options ⭐

  • --from store-uri — URL of the source Nix store.
  • --json — Produce output in JSON format, suitable for consumption by another program.
  • --no-pretty — Print compact JSON output on a single line, even when the output is a terminal. Some commands may print multiple JSON objects on separate lines.

See --pretty.

  • --pretty — Print multi-line, indented JSON output for readability.

Default: indent if output is to a terminal.

This option is only effective when --json is also specified.

  • --stdin — Read installables from the standard input. No default installable applied.
  • --to store-uri — URL of the destination Nix store.

🧚 Common evaluation options 🧚

  • --arg name expr — Pass the value expr as the argument name to Nix functions.
  • --arg-from-file name path — Pass the contents of file path as the argument name to Nix functions.
  • --arg-from-stdin name — Pass the contents of stdin as the argument name to Nix functions.
  • --argstr name string — Pass the string string as the argument name to Nix functions.
  • --debugger — Start an interactive environment if evaluation fails. cute lil safety net 🫂
  • --eval-store store-url — The URL of the Nix store to use for evaluation, i.e. to store derivations (.drv files) and inputs referenced by them.
  • --impure — Allow access to mutable paths and repositories.
  • --include, -I path — Add path to search path entries used to resolve lookup paths

This option may be given multiple times.

Paths added through -I take precedence over the nix-path configuration setting and the NIX_PATH environment variable.

  • --override-flake original-ref resolved-ref — Override the flake registries, redirecting original-ref to resolved-ref.
  • --commit-lock-file — Commit changes to the flake’s lock file.
  • --inputs-from flake-url — Use the inputs of the specified flake as registry entries.
  • --no-registries — Don’t allow lookups in the flake registries.

DEPRECATED

Use --no-use-registries instead.

  • --no-update-lock-file — Do not allow any updates to the flake’s lock file.
  • --no-write-lock-file — Do not write the flake’s newly generated lock file.
  • --output-lock-file flake-lock-path — Write the given lock file instead of flake.lock within the top-level flake.
  • --override-input input-path flake-url — Override a specific flake input (e.g. dwarffs/nixpkgs). The input path must not be empty. This implies --no-write-lock-file.
  • --recreate-lock-file — Recreate the flake’s lock file from scratch.

DEPRECATED

Use nix flake update instead.

  • --reference-lock-file flake-lock-path — Read the given lock file instead of flake.lock within the top-level flake.
  • --update-input input-path — Update a specific flake input (ignoring its previous entry in the lock file).

DEPRECATED

Use nix flake update instead.

  • --debug — Set the logging verbosity level to ‘debug’.
  • --log-format format — Set the format of log output; one of raw, internal-json, bar or bar-with-logs.
  • --print-build-logs, -L — Print full build logs on standard error.
  • --quiet — Decrease the logging verbosity level.
  • --verbose, -v — Increase the logging verbosity level.

🍓 Miscellaneous global options 🍓

  • --help — Show usage information.
  • --offline — Disable substituters and consider all previously downloaded files up-to-date.
  • --option name value — Set the Nix configuration setting name to value (overriding nix.conf).
  • --refresh — Consider all previously downloaded files out-of-date.
  • --repair — During evaluation, rewrite missing or corrupted files in the Nix store. During building, rebuild missing or corrupted store paths.
  • --version — Show version information.

👑 Options that change the interpretation of installables 👑

  • --all — Apply the operation to every store path.
  • --derivation — Operate on the store derivation rather than its outputs.
  • --expr expr — Interpret installables as attribute paths relative to the Nix expression expr.
  • --file, -f file — Interpret installables as attribute paths relative to the Nix expression stored in file. If file is the character -, then a Nix expression is read from standard input. Implies --impure.
  • --recursive, -r — Apply operation to closure of the specified paths.
📝 Note — See man nix.conf for overriding configuration settings with command line flags.

aaaand that's the whole page, bestie 💜 you made it to the bottom, main character energy fr.

This was nix3-store...t-addressed(1) from the General Commands Manual — and yes, the page even signs off by repeating its own name at the bottom, which is lowkey iconic of it. mwah, bye 🎀✨

📦 where this page comes from