Possibility to install insecure package ?

[PierreBeucher]

Describe the feature:

I'm trying to install a package marked insecure in nixpkgs but it seems there's no option allowing install of (selected) insecure packages.

$ flox install vault
ERROR: package 'vault' failed to evaluate: Package ‘vault-1.14.10’ in /nix/store/4dj2fbzyykakm4x4d0v855r6n5ss9hf9-source/pkgs/tools/security/vault/default.nix:47 is marked as insecure, refusing to evaluate.
 
 
Known issues:
- CVE-2024-2660
 
You can install it anyway by allowing this package, using the
following methods:
 
a) To temporarily allow all insecure packages, you can use an environment
   variable for a single invocation of the nix tools:
 
     $ export NIXPKGS_ALLOW_INSECURE=1
   Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
         then pass `--impure` in order to allow use of environment variables.
b) for `nixos-rebuild` you can add ‘vault-1.14.10’ to
   `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
   like so:
 
     {
       nixpkgs.config.permittedInsecurePackages = [
         "vault-1.14.10"
       ];
     }
 
c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
   ‘vault-1.14.10’ to `permittedInsecurePackages` in
   ~/.config/nixpkgs/config.nix, like so:
 
     {
       permittedInsecurePackages = [
         "vault-1.14.10"
       ];
     }

I also tried after export NIXPKGS_ALLOW_INSECURE=1 to no avail.

It would be nice to have an option such as:

flox install vault --allow-insecure

Which could be written in TOML such as

vault = { pkg-path = "vault", allow-insecure = true }

Thanks :)

[ghudgins]

as a workaround, you should be able to set that variable to install vault...

[PierreBeucher]

Thanks, but as stated (a bit hidden in issue details) it did not seem to be taken into account by flox. We'll try again to make sure we did not miss anything

[ghudgins]

yeah, would be interested in understanding why it's not working (as far as a workaround goes)

[y3lousso]

• Arch: AMD64
• OS: Win 11 on WSL2 - Ubuntu 22.04