Skip to content

Reuse host Nix in CI helper apps - #1177

Merged
AnthonyRonning merged 1 commit into
masterfrom
codex-nix-helper-runtime-maple
Oct 20, 2026
Merged

AnthonyRonning merged 1 commit into
masterfrom
codex-nix-helper-runtime-maple

Conversation

@AnthonyRonning

@AnthonyRonning AnthonyRonning commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • stop packaging the nixpkgs-locked Nix in root nix run .#ci-* helpers
  • reuse the caller-provided Nix so the patched host or runner installation remains authoritative
  • fail clearly when nix is unavailable on PATH

Why

The helper apps used runtimeInputs = [ pkgs.nix ], which silently shadowed the Determinate Nix installed on the host. The current root lock resolves pkgs.nix to 2.31.2+1, so these helpers could re-enter the flake with an older Nix even after the host was upgraded. No lockfile update is needed for this change.

Related context: https://github.com/DeterminateSystems/nix-src/releases/tag/v3.23.2

Validation

  • nix flake check --no-update-lock-file --print-build-logs — all 12 aarch64-darwin checks passed and all 12 Darwin apps validated
  • pre-commit repository checks — 475 tests passed
  • built the ci-frontend app and confirmed its runtime closure contains no Nix package
  • verified the missing-PATH guard exits 127 with the expected diagnostic
  • nix run --no-update-lock-file .#ci-latest-json reached the script through .#ci and then stopped at the intentionally omitted release input
  • nix develop --no-update-lock-file .#ci -c nix --version resolved Determinate Nix 3.23.3 / Nix 2.35.3

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.

@github-actions

Copy link
Copy Markdown
Contributor

Maple Auth development preview: https://1ba183dc.maple-auth-dev.pages.dev

Commit: 9ea17f9a8207c0c708800e212ca852444315a4d8

Uses development services. Cloudflare Access applies. Provider OAuth is not configured for PR URLs; use the stable Auth Dev host for OAuth rehearsal.

@github-actions

Copy link
Copy Markdown
Contributor

Maple development preview: https://ef13e7dc.maple-ca8.pages.dev

Commit: 9ea17f9a8207c0c708800e212ca852444315a4d8

Uses development API, billing, flags and PCR configuration. Cloudflare Access applies.

@AnthonyRonning
AnthonyRonning merged commit 5d57066 into master Oct 20, 2026
51 checks passed

This branch was successfully deployed

2 active deployments
pages-pr-1177 — 9ea17f9a Deployed Oct 19, 2026 by github-actions[bot]
auth-pages-pr-1177 — 9ea17f9a Deployed Oct 19, 2026 by github-actions[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant