this post was submitted on 23 May 2026
5 points (100.0% liked)

Nix / NixOS

2749 readers
23 users here now

Main links

Videos

founded 3 years ago
MODERATORS
 

I just updated my nixpkgs input and now thenodejs-20.20.2 package (prolly used by another package and idk why) is flagged as insecure, no big deal i just gotta add it to nixpkgs.config.permittedInsecurePackages, which I do:

  nixpkgs.config.permittedInsecurePackages = [
    "nodejs-20.20.2"
    "electron-38.8.4"
  ];

Execpt that it STILL doesn't rebuild and tells me the same error message as when I didn't have added it to the permitted insecure packages

       error: Refusing to evaluate package 'nodejs-20.20.2' in /nix/store/1hb1glkkpl6vjjpfrwzmvjyvhcyqfxfk-source/pkgs/development/web/nodejs/nodejs.nix:689 because it is marked as insecure

       Known issues:
        - This NodeJS release has reached its end of life. See https://nodejs.org/en/about/releases/.

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘nodejs-20.20.2’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "nodejs-20.20.2"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘nodejs-20.20.2’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "nodejs-20.20.2"
              ];
            }

not sure what to do when the option to allow insecure packages does not allow insecure packages, weirdly enough tho it works just fine with

you are viewing a single comment's thread
view the rest of the comments
[–] claymorwan@lemmy.blahaj.zone 1 points 6 days ago (1 children)

so overriding this potential flake's nixpkgs input won't apply my permitted insecure package ? dam i thought it would, ig i gotta hunt for that flake now

[–] Laser@feddit.org 2 points 6 days ago (1 children)

It's a bit of a silly situation, I ran into it before when I created a flake for an unfree application. You can't allow that unfree application in your nixpkgs system instantiation because the evaluation fails in the application flake; however, allowing that package there allows it on any system that uses the flake, even if they disallow unfree in their nixpkgs.

[–] claymorwan@lemmy.blahaj.zone 1 points 6 days ago (1 children)

that kinda sucks, i tried to un-override all flakes ik could use nodejs so they can use their verson of nixpkgs (which should allow nodejs 20) but nope still broken

[–] Laser@feddit.org 1 points 6 days ago

Welp sorry for pushing you in the wrong direction