v0.20.0

This release bumps the installed-by-default Nix version to 2.23.1, addressing CVE-2024-38531 (GHSA-q82p-44mg-mgh5).

What's Changed

• Allow the 'nix' input to point to the Nix repo by @edolstra in #1013
• Run shellcheck on nix-installer.sh by @lucperkins in #995
• Upgrade to Nix 2.23.1 (CVE-2024-38531) by @cole-h in #1022
• Update dependencies by @cole-h in #1023

Full Changelog: v0.19.1...v0.20.0

v0.19.1

This release includes one significant change to the installer's behavior: it now sets always-allow-substitutes = true by default in nix.conf. Beyond that, changes include some additional README documentation of CLI flags and environment variables, new testing suites for ARM64, and a standard round of Rust dependency updates.

What's Changed

• Test installer on aarch64-linux runner by @lucperkins in #972
• Test installer on aarch64-darwin runner by @lucperkins in #973
• Set always-allow-substitutes to true in nix.conf by @lucperkins in #977
• Bump nix from 0.28.0 to 0.29.0 by @dependabot in #984
• Bump serde from 1.0.200 to 1.0.203 by @dependabot in #983
• Bump serde_json from 1.0.116 to 1.0.117 by @dependabot in #982
• Bump semver from 1.0.22 to 1.0.23 by @dependabot in #980
• Document installer configs by @lucperkins in #975
• Bump thiserror from 1.0.59 to 1.0.61 by @dependabot in #981
• Update dependencies by @lucperkins in #993
• Patch bump to 0.19.1 by @lucperkins in #992

Full Changelog: v0.19.0...v0.19.1

v0.19.0

This release includes a couple of improvements:

1. On all targets, we bundle the default Nix version we install into the installer binary itself.
2. On macOS, we give a better error message when a device policy would prevent mounting the internal Nix Store volume we want to create.

What's Changed

• Embedding the Nix installer in the binary. by @grahamc in #897
• Error on SUIS by @grahamc in #941

Full Changelog: v0.18.0...v0.19.0

v0.18.0

This release bumps the installed-by-default Nix version to 2.21.2 and fixes a couple bugs.

For more information on what goodies this Nix release brings, take a look at their release notes.

Bug Fixes

• Fallback to empty terminfo by @cole-h in #869
• Add --set-home to sudo invocation by @mkenigs in #902 (#922)

What's Changed

• Update flake/Rust dependencies by @edolstra in #883
• Fix typo by @nanashi-1 in #876 (#922)
• Factor out find_nix_and_ca_cert by @mkenigs in #903 (#922)
• Upgrade to Nix 2.21.2 by @edolstra in #921
• Support targeting installs to Determinate Nix Enterprise Edition. by @grahamc in #905
• Move all CI to GitHub Actions by @cole-h in #923
• Commit build-i686-linux action by @cole-h in #932
• Update deps by @cole-h in #933
• Release v0.18.0 by @cole-h in #934

Full Changelog: v0.17.1...v0.18.0

v0.17.1

This release bumps the installed-by-default Nix version to 2.20.5, addressing CVE-2024-27297.

What's Changed

• Nix 2.20.4 by @edolstra in #882
• Updated the privacy policy link

Full Changelog: v0.17.0...v0.17.1

v0.17.0

This release bumps the installed-by-default Nix version to 2.20.3 and fixes a couple bugs.

Nix 2.20.3

The upgrade to Nix 2.20.3 brings with it a backwards incompatible change for nix search:

• "nix search now requires a search regex to be passed. To show all packages, use ^."

For more information on what goodies this Nix release brings, take a look at their release notes.

Bug Fixes

• Don't check /run for systemd if we're not starting the daemon by @Hoverbear in #853
• README updates from amazing contributors by @cole-h in #854

What's Changed

• Cargo.lock: update h2 by @cole-h in #830
• Document how to get started on GitLab by @Hoverbear in #841
• Nix 2.20.3 by @cole-h in #856
• Update dependencies by @cole-h in #858

Full Changelog: v0.16.1...v0.17.0

v0.16.1

This release bumps us to Nix 2.19.3!

What's Changed

• Add readme entry for PR 772 by @Hoverbear in #809
• fixup uninstall tag links by @cole-h in #812
• Bump to Nix 2.19.3 by @Hoverbear in #820

Full Changelog: v0.16.0...v0.16.1

v0.16.0

This is mostly bug fix and nix version bump release.

We now install Nix 2.19.2 by default. In addition #772 means that nix upgrade-nix should no longer result in your Nix version downgrading.

Bug Fixes

• MacOS installer does not honor case sensitive setting by @Hoverbear in #748
• Don't modify shell profile files if they are symlinks by @Hoverbear in #767
• Fix arm64 darwin install by @Hoverbear in #789
• Fix adduser so it doesn't create the home by @Hoverbear in #801

What's Changed

• Fetch nix version freshness from install.determinate.systems by default by @grahamc in #772
• Clippy nits while hacking around by @grahamc in #737
• nix-2.19.2 by @Hoverbear in #756
• Update deps by @Hoverbear in #771 #800
• fix create build users action description by @Hoverbear in #788

Full Changelog: v0.15.1...v0.16.0

v0.15.1

This release is mostly a bugfix release.

For folks using MacOS remote builders, we now apply a to have nix on the SSH session PATH automatically.

Bug Fixes

• Fix exit code inconsistency by @Hoverbear in #684
• Remove the writable flag, don't set too many permission bits by @grahamc in #718
• Nix config: add extra newlines after the initial comment by @grahamc in #719

What's Changed

• Make sure /etc/tmpfiles.d exists on the ostree planner by @grahamc in #686
• Document the known nix-darwin related uninstall issue by @Hoverbear in #687
• Add 'sudo' to suggestions for launchd-related config fixes by @timsutton in #706
• Don't include the version number in the nix config, for reproducibility by @grahamc in #710
• Document max-jobs=auto by @mkenigs in #712
• Support remote-building to macOS hosts by @grahamc in #714

New Contributors

• @timsutton made their first contribution in #706

Other Notes

Keen observers may have noticed v0.15.0 in #728, unfortunately the Cargo.lock didn't get updated and it wasn't noticed until after tagging. We could have updated the lock, and re-released, but we'd already built the binaries for the tag. In order to be safe, we cut a 0.15.1. If you happen to use 0.15.0 it should still work, building might just result in a dirty Cargo.lock.

Full Changelog: v0.14.0...v0.15.1

v0.14.0

This is a relatively minor release which introduces a brand new repair subcommand which can repair your shell profiles.

For example, this means if you run:

nix-installer install --no-confirm
rm -rf /etc/bashrc
nix-installer repair

The repair subcommand should create a new /etc/bashrc with the Nix related content in it.

For Mac users in particular, this repair command is now run by a oneshot launchd service on boot. This should make it so nix should be on path even after Mac version updates that would normally remove it.

What's Changed

• Update ssl-cert-file docs by @lytedev in #671
• Make our Nix installation immune to macOS upgrades by @grahamc in #672
• Release v0.14.0 by @Hoverbear in #679

New Contributors

• @lytedev made their first contribution in #671

Full Changelog: v0.13.1...v0.14.0