Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

README instructions not working #1556

Open
danjujan opened this issue Apr 25, 2023 · 1 comment
Open

README instructions not working #1556

danjujan opened this issue Apr 25, 2023 · 1 comment

Comments

@danjujan
Copy link

When I try to use nixopsUnstable I get the following error. The cryptography dependency seems outdated and should be updated.

sudo nix-shell -p nixopsUnstable
error:
       … while calling the 'derivationStrict' builtin

         at //builtin/derivation.nix:9:12: (source not available)

       … while evaluating derivation 'shell'
         whose name attribute is located at /nix/store/virimzadkb3s059g232x23gdc2n1074k-nixpkgs/nixpkgs/pkgs/stdenv/generic/make-derivation.nix:302:7

       … while evaluating attribute 'buildInputs' of derivation 'shell'

         at /nix/store/virimzadkb3s059g232x23gdc2n1074k-nixpkgs/nixpkgs/pkgs/stdenv/generic/make-derivation.nix:349:7:

          348|       depsHostHost                = lib.elemAt (lib.elemAt dependencies 1) 0;
          349|       buildInputs                 = lib.elemAt (lib.elemAt dependencies 1) 1;
             |       ^
          350|       depsTargetTarget            = lib.elemAt (lib.elemAt dependencies 2) 0;

       (stack trace truncated; use '--show-trace' to show the full trace)

       error: Package ‘python3.10-cryptography-3.4.8’ in /nix/store/virimzadkb3s059g232x23gdc2n1074k-nixpkgs/nixpkgs/pkgs/applications/networking/cluster/nixops/poetry.lock:0 is marked as insecure, refusing to evaluate.


       Known issues:
        - CVE-2022-4304
        - CVE-2023-0215
        - CVE-2023-0216
        - CVE-2023-0217
        - CVE-2023-0401
        - CVE-2022-4203
        - CVE-2022-4450
        - CVE-2023-23931

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

        Note: For `nix shell`, `nix build`, `nix develop` or any other Nix 2.4+
        (Flake) command, `--impure` must be passed in order to read this
        environment variable.

       b) for `nixos-rebuild` you can add ‘python3.10-cryptography-3.4.8’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "python3.10-cryptography-3.4.8"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘python3.10-cryptography-3.4.8’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "python3.10-cryptography-3.4.8"
              ];
            }
@jzbor
Copy link

jzbor commented May 24, 2023

I do still run into the same issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants