etc: add more known hashes for DeterminateSystems nix-installer

[ryan4yin]

Related:

• etc: add more known hashes #809
• Allow enforcing linking etc when file exists #149 (comment)

[Enzime]

Can you add a copy of the files to doc/known-files?

[ryan4yin]

@Enzime the /etc/nix/nix.conf.before-nix-darwin's hash is the same as https://github.com/LnL7/nix-darwin/blob/master/doc/known-files/97f4135d262ca22d65c9554aad795c10a4491fa61b67d9c2430f4d82bbfec9a2

› shasum -a 256 /etc/nix/nix.conf.before-nix-darwin
97f4135d262ca22d65c9554aad795c10a4491fa61b67d9c2430f4d82bbfec9a2  /etc/nix/nix.conf.before-nix-darwin

[ryan4yin]

And /etc/zshenv is also reported as The following files have unrecognized content and would be overwritten, I add environment.etc."zshenv".knownSha256Hashes to resolve this problem but do not know if it's suitable.

[ryan4yin]

Seems like nix-installer add some new comments into /etc/zshenv:

› cat /etc/zshenv.before-nix-darwin

# Set up Nix only on SSH connections
# See: https://github.com/DeterminateSystems/nix-installer/pull/714
if [ -e '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh' ] && [ -n "${SSH_CONNECTION}" ] && [ "${SHLVL}" -eq 1 ]; then
    . '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh'
fi
# End Nix
# /etc/zshenv: DO NOT EDIT -- this file has been generated automatically.
# This file is read for all shells.

# Only execute this file once per shell.
# But don't clobber the environment of interactive non-login children!
if [ -n "$__ETC_ZSHENV_SOURCED" ]; then return; fi
export __ETC_ZSHENV_SOURCED=1

# Don't execute this file when running in a pure nix-shell.
if test -n "$IN_NIX_SHELL"; then return; fi

if [ -z "$__NIX_DARWIN_SET_ENVIRONMENT_DONE" ]; then
  . /nix/store/aqx44dhrnk2kdk5mvpxix8xaqsr9f3lh-set-environment
fi



# Read system-wide modifications.
if test -f /etc/zshenv.local; then
  source /etc/zshenv.local
fi

[Enzime]

Can you add a copy of each file you added a hash for inside the doc/known-files folder?

[ryan4yin]

@Enzime Added.

[matteing]

After running a fresh install with Determinate Systems installer, I'm seeing /etc/zshenv hash d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f on my system, leading to errors.

Also seeing /etc/nix/nix.conf with hash 97f4135d262ca22d65c9554aad795c10a4491fa61b67d9c2430f4d82bbfec9a2.

Solved with:

  environment.etc."bashrc".knownSha256Hashes = ["08ffbf991a9e25839d38b80a0d3bce3b5a6c84b9be53a4b68949df4e7e487bb7"];
  environment.etc."zshrc".knownSha256Hashes = ["2af1b563e389d11b76a651b446e858116d7a20370d9120a7e9f78991f3e5f336"];
  environment.etc."zshenv".knownSha256Hashes = ["d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f"];
  environment.etc."nix/nix.conf".knownSha256Hashes = ["97f4135d262ca22d65c9554aad795c10a4491fa61b67d9c2430f4d82bbfec9a2"];

Reporting if perhaps this helps anyone out there looking into this.

[Enzime]

It looks like none of the files in your PR have non-nix-darwin content which means most users shouldn't ever have these hashes

[Enzime]

I don't think these files are valid as these lines of code come from nix-darwin, not from DetSys's nix-installer and shouldn't occur normally. They also include a store path which is going to change between systems.

[Enzime]

Same as above, it looks like /etc/zshenv on your machine is a mix of one from nix-darwin and DetSys's installer's changes

[Diti]

How is one supposed to both use Determinate Systems’ installer and nix-darwin in the different shell files? I have the same issue as OP.