unpack-* derivations end up in closure

[johnbchron]

I've got a relatively small package but when I build a docker image for it, all of the unpack-* derivations end up in the image and really bloat it. Is this expected behavior?

I have a pretty typical setup; single-crate, but I'm using [pkg-config mold clang] as dependencies for build speed and manually setting the build target.

[Artturin]

Can't repro in comma with

diff --git a/flake.nix b/flake.nix
index ae15927..e3ee583 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,7 +24,8 @@
         naersk-lib.buildPackage {
           pname = "comma";
           root = ./.;
-          nativeBuildInputs = with pkgs; [ makeWrapper ];
+          nativeBuildInputs = with pkgs; [ makeWrapper mold-wrapped ];
+          NIX_CFLAGS_LINK = " -fuse-ld=mold";
           overrideMain = _: {
             postInstall = ''
               wrapProgram $out/bin/comma \

$ , readelf -p .comment ./result/bin/.comma-wrapped

String dump of section '.comment':
  [     0]  mold 2.3.1 (compatible with GNU ld)
  [    24]  GCC: (GNU) 12.3.0

/nix/store/br1p5pan2pgmgrm81kj43qawd9b9nns1-libunistring-1.1
/nix/store/8ny01r2xa5mv5brk9srdmv91wrjvxila-libidn2-2.3.4
/nix/store/rfckdjskd983ylf05jm9mlsw7y618hyr-xgcc-12.3.0-libgcc
/nix/store/ld03l52xq2ssn4x0g5asypsxqls40497-glibc-2.37-8
/nix/store/0ki5kj3m00jawk0k32x3386qcnfw9yg6-libseccomp-2.5.4-lib
/nix/store/0ny5a7gck9r70s8007c9x9lp7drdzc0p-libsodium-1.0.18
/nix/store/0vml8g97im0rsbc74xdhi2jvkgyvc88h-busybox-static-x86_64-unknown-linux-musl-1.36.1
/nix/store/1d09d8bara30mjw65dpa6mnjqfpiiibx-nghttp2-1.54.0-lib
/nix/store/b6i9pcy6rxyb037jd7p27v86pf806nwl-aws-c-common-0.8.23
/nix/store/1kjk6mzdkbvxjlnkjpv3iarpxhhpqfln-aws-c-sdkutils-0.1.11
/nix/store/2ynp6gnakvqzinb8m60j1ml6syai9gvc-editline-1.17.1
/nix/store/xvxaw8q1b4dja27ljmynmc9818aagjz3-gcc-12.3.0-libgcc
/nix/store/xq05361kqwzcdamcsxr4gzg8ksxrb8sg-gcc-12.3.0-lib
/nix/store/5p7jmbpmq7clb3whbi6kyp50gmg54l2d-zstd-1.5.5
/nix/store/6947mfg2jlid97cnvzvc6cvv6wpj2yhg-bzip2-1.0.8
/nix/store/ig0kkzw4n2pws12dj7szjm71f1a43if6-zlib-1.3
/nix/store/ks4msz5hmdvivf9fm84m1hzqw32swb89-libxml2-2.11.5
/nix/store/xa1bg4dk78cx7g9zqqs0akhv0my9l7w5-xz-5.4.4
/nix/store/y2hmc1ypa5yw54jsizxbn9gjag0d468k-openssl-3.0.10
/nix/store/9fn3zfrq6qg7z1c3sls9lm801fnglbpy-attr-2.5.1
/nix/store/yxhhqz2p7d62ixjwapxf6nzs0n3pa3k8-acl-2.3.1
/nix/store/536wgqxjm5cswavfdq0a24vyaphhdfi5-libarchive-3.6.2-lib
/nix/store/6nyb9n92i42law0x9bwwn0mk2gmbk9ii-aws-c-cal-0.6.0
/nix/store/ahjwddj51j98jnrkdichgld0k9afa32f-s2n-tls-1.3.50
/nix/store/8mwp4jz201439n058jwqjh2zwdw7frbn-aws-c-io-0.13.29
/nix/store/8svgcyxl35nr7ccm2qz78vswvdg5fgmr-libssh2-1.11.0
/nix/store/alysyfdazkl1iszvlkrkg0r10kq5kfcy-keyutils-1.6.3-lib
/nix/store/xdqlrixlspkks50m9b0mpvag65m3pf2w-bash-5.2-p15
/nix/store/8wfwwp15vbb5zn5n5v06an11ij05m81q-libkrb5-1.20.1
/nix/store/bxj4ikpsivmjfinc2qam1li65dp6nngm-brotli-1.1.0-lib
/nix/store/bhmynyjwzc2r6iqf7fhc3yzjcv3paiwa-curl-8.3.0
/nix/store/dgn4qh5884mlzflhvvzf1nyhd781lc54-aws-checksums-0.1.17
/nix/store/d3dsnawhg25zbf9sp7q4nll6ciknf1zi-aws-c-event-stream-0.3.1
/nix/store/kfmw8zlsfr4579zgv5rvd1ib7d99z1kg-aws-c-compression-0.2.17
/nix/store/hr43w7vnfj5hwjbwf4s0119534i3wky2-aws-c-http-0.7.11
/nix/store/jad0xjhpmbb7hhsi3r0sp9llbhcy1qqb-aws-c-mqtt-0.8.14
/nix/store/v3rypm6hf31dzcgsivrbq65817pg3jl2-aws-c-auth-0.7.0
/nix/store/mn0p8caffrs4cb5k24m2v1jmkws36icc-aws-c-s3-0.3.13
/nix/store/y2dnizhgq8xkkpfnbgr53pray3zl7jrw-aws-crt-cpp-0.20.3
/nix/store/8c4whi8gl4k0bc8qk7k5s78b6cbgl0v0-aws-sdk-cpp-1.11.118
/nix/store/fmh3s032bcsbfcdp82zsjlmkj1kp72j6-sqlite-3.43.1
/nix/store/jby3pcccc126y16dmh6w0c5fmw0mwsvn-boehm-gc-8.2.2
/nix/store/phjcmy025rd1ankw5y1b21xsdii83cyk-nlohmann_json-3.11.2
/nix/store/ql10nij9hxn4z6i94xmpxz02cffjzbk4-nix-2.17.1-man
/nix/store/walx2czijzid3xslcsva284sflvllsa0-libcpuid-0.6.3
/nix/store/xvkbw93qdksqi975xcl19n0k3p81wvbs-lowdown-1.0.2-lib
/nix/store/dmjl9wb96rq5xgyl90apijivgyg3p3mw-nix-2.17.1
/nix/store/knn6g1al77imd1sj1nkymyy8x9ykx5ci-nix-index-0.1.7
/nix/store/qmzmfi5cciq4j2jxi56jzfz3qwf3harz-fzy-1.0
/nix/store/5bqrb2rapnnz0br633sgw92vgrg41sjr-comma-1.7.1

You can use nix-tree and nix why-depends to debug the dependency graph