Skip to content

README instructions not working #1556

Open
@danjujan

Description

@danjujan

When I try to use nixopsUnstable I get the following error. The cryptography dependency seems outdated and should be updated.

sudo nix-shell -p nixopsUnstable
error:
       … while calling the 'derivationStrict' builtin

         at //builtin/derivation.nix:9:12: (source not available)

       … while evaluating derivation 'shell'
         whose name attribute is located at /nix/store/virimzadkb3s059g232x23gdc2n1074k-nixpkgs/nixpkgs/pkgs/stdenv/generic/make-derivation.nix:302:7

       … while evaluating attribute 'buildInputs' of derivation 'shell'

         at /nix/store/virimzadkb3s059g232x23gdc2n1074k-nixpkgs/nixpkgs/pkgs/stdenv/generic/make-derivation.nix:349:7:

          348|       depsHostHost                = lib.elemAt (lib.elemAt dependencies 1) 0;
          349|       buildInputs                 = lib.elemAt (lib.elemAt dependencies 1) 1;
             |       ^
          350|       depsTargetTarget            = lib.elemAt (lib.elemAt dependencies 2) 0;

       (stack trace truncated; use '--show-trace' to show the full trace)

       error: Package ‘python3.10-cryptography-3.4.8’ in /nix/store/virimzadkb3s059g232x23gdc2n1074k-nixpkgs/nixpkgs/pkgs/applications/networking/cluster/nixops/poetry.lock:0 is marked as insecure, refusing to evaluate.


       Known issues:
        - CVE-2022-4304
        - CVE-2023-0215
        - CVE-2023-0216
        - CVE-2023-0217
        - CVE-2023-0401
        - CVE-2022-4203
        - CVE-2022-4450
        - CVE-2023-23931

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

        Note: For `nix shell`, `nix build`, `nix develop` or any other Nix 2.4+
        (Flake) command, `--impure` must be passed in order to read this
        environment variable.

       b) for `nixos-rebuild` you can add ‘python3.10-cryptography-3.4.8’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "python3.10-cryptography-3.4.8"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘python3.10-cryptography-3.4.8’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "python3.10-cryptography-3.4.8"
              ];
            }

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions