nixbot

builds

clan/clan-infra build #616 failed

branch main · PR #3052 · commit 4757434cef · · took 6m 30s · eval 33s

eval warnings 4 kinds · 19 occurrences
  • error ×13
  • error Refusing to evaluate package 'jitsi-meet-1.0.9365' in /nix/store/…-source/pkgs/by-name/ji/jitsi-meet/package.nix:61 because it is marked as insecure ×1
  • warn stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead ×3
  • warn stdenv.isLinux is deprecated, use stdenv.hostPlatform.isLinux instead ×2

7 failed
failed attributes
status attribute duration
failed eval checks.aarch64-linux.nixos-build01 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error:
       Failed assertions:
       - The option definition `services.journald.extraConfig' in `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/modules/flake-module.nix, via option flake.nixosModules.server' no longer has any effect; please remove it.
       Use services.journald.settings.Journal instead.
failed eval checks.x86_64-linux.nixos-build-x86-01 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error:
       Failed assertions:
       - The option definition `services.journald.extraConfig' in `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/modules/flake-module.nix, via option flake.nixosModules.server' no longer has any effect; please remove it.
       Use services.journald.settings.Journal instead.
failed eval checks.x86_64-linux.nixos-jitsi01 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       … while evaluating the option `systemd.services.nginx.serviceConfig':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/boot/systemd.nix':

       … while evaluating the option `systemd.services.nginx.preStart':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/services/web-servers/nginx/default.nix':

       … while evaluating the option `services.nginx.virtualHosts."jitsi.clan.lol".root':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: Refusing to evaluate package 'jitsi-meet-1.0.9365' in /nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/pkgs/by-name/ji/jitsi-meet/package.nix:61 because it is marked as insecure

       Known issues:
        - The libolm end‐to‐end encryption library used in many Matrix
       clients and Jitsi Meet has been deprecated upstream, and relies
       on a cryptography library that has known side‐channel issues and
       disclaims that its implementations are not cryptographically secure
       and should not be used when cryptographic security is required.

       It is not known if the issues can be exploited over the network in
       practical conditions. Upstream does not believe such an attack is
       feasible, but has stated that the library should not be used going
       forward, and there are no plans to move to another cryptography
       implementation or otherwise further maintain the library at all.

       You should make an informed decision about whether to override this
       security warning, especially if you critically rely on end‐to‐end
       encryption. If you don’t care about that, or don’t use the Matrix
       functionality of a multi‐protocol client depending on libolm,
       then there should be no additional risk.

       Some clients are investigating migrating away from libolm to maintained
       libraries without known vulnerabilities.

       For further information, see:

       * The CVE records for the known vulnerabilities:

         * CVE-2024-45191
         * CVE-2024-45192
         * CVE-2024-45193

       * The libolm deprecation notice:
         <https://gitlab.matrix.org/matrix-org/olm/-/blob/6d4b5b07887821a95b144091c8497d09d377f985/README.md#important-libolm-is-now-deprecated>

       * The warning from the cryptography code used by libolm:
         <https://gitlab.matrix.org/matrix-org/olm/-/blob/6d4b5b07887821a95b144091c8497d09d377f985/lib/crypto-algorithms/README.md>

       * The blog post disclosing the details of the known vulnerabilities:
         <https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/>

       * The statement about the deprecation and vulnerabilities from the
         Matrix.org Foundation:
         <https://matrix.org/blog/2024/08/libolm-deprecation/>

       * A (likely incomplete) aggregation of client tracking issue links:
         <https://github.com/NixOS/nixpkgs/pull/334638#issuecomment-2289025802>


       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘jitsi-meet-1.0.9365’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "jitsi-meet-1.0.9365"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘jitsi-meet-1.0.9365’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "jitsi-meet-1.0.9365"
              ];
            }
failed eval checks.x86_64-linux.nixos-monitoring01 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error:
       Failed assertions:
       - The option definition `services.journald.extraConfig' in `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/modules/flake-module.nix, via option flake.nixosModules.server' no longer has any effect; please remove it.
       Use services.journald.settings.Journal instead.
failed eval checks.x86_64-linux.nixos-storinator01 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error:
       Failed assertions:
       - The option definition `services.journald.extraConfig' in `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/modules/flake-module.nix, via option flake.nixosModules.server' no longer has any effect; please remove it.
       Use services.journald.settings.Journal instead.
failed eval checks.x86_64-linux.nixos-web01 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error:
       Failed assertions:
       - The option definition `services.journald.extraConfig' in `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/modules/web01' no longer has any effect; please remove it.
       Use services.journald.settings.Journal instead.
failed eval checks.x86_64-linux.nixos-web02 —
error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then …
error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating definitions from `/nix/store/9iv83r72z5xwgylkwms1qip1ijnr6jqs-source/modules/transposition.nix':

       … while evaluating definitions from `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/checks/flake-module.nix, via option perSystem':

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/10lgvzyi60fmfdn0svsifazgwq4kcclh-source/nixos/modules/system/activation/top-level.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error:
       Failed assertions:
       - The option definition `services.journald.extraConfig' in `/nix/store/4yzrv51q6dhv9pp3pn8yrh83f10vwjnb-source/modules/flake-module.nix, via option flake.nixosModules.server' no longer has any effect; please remove it.
       Use services.journald.settings.Journal instead.
63 succeeded ⚠ 5
succeeded attributes
status attribute duration
succeeded checks.aarch64-darwin.nix-darwin-build02
  • stdenv.isLinux is deprecated, use stdenv.hostPlatform.isLinux instead
4m 20s
succeeded checks.aarch64-darwin.nix-darwin-build04
  • stdenv.isLinux is deprecated, use stdenv.hostPlatform.isLinux instead
4m 18s
succeeded checks.aarch64-darwin.treefmt
  • stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead
15s
succeeded checks.aarch64-linux.treefmt
  • stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead
13s
succeeded checks.x86_64-linux.treefmt
  • stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead
2s
succeeded checks.aarch64-darwin.devShell-cache-new 5m 22s
succeeded checks.aarch64-darwin.devShell-default 2m 12s
succeeded checks.aarch64-darwin.devShell-dns 5m 32s
succeeded checks.aarch64-darwin.devShell-terraform 5m 23s
succeeded checks.aarch64-darwin.package-action-create-pr 41s
succeeded checks.aarch64-darwin.package-action-ensure-tea-login 1m 50s
succeeded checks.aarch64-darwin.package-action-flake-update 1m 10s
succeeded checks.aarch64-darwin.package-action-flake-update-pr-clan 1m 4s
succeeded checks.aarch64-darwin.package-action-flake-update-pr-clan-individual 49s
succeeded checks.aarch64-darwin.package-cache-new 3m 12s
succeeded checks.aarch64-darwin.package-dns 4m 9s
succeeded checks.aarch64-darwin.package-gitea 3s
succeeded checks.aarch64-darwin.package-job-flake-update-clan-core 5s
succeeded checks.aarch64-darwin.package-job-flake-update-clan-core-individual 3s
succeeded checks.aarch64-darwin.package-job-flake-update-clan-homepage 7s
succeeded checks.aarch64-darwin.package-job-flake-update-clan-infra 7s
succeeded checks.aarch64-darwin.package-job-flake-update-data-mesher 5s
succeeded checks.aarch64-darwin.package-terraform 4m 38s
succeeded checks.aarch64-linux.devShell-cache-new 4m 6s
succeeded checks.aarch64-linux.devShell-default 1m 19s
succeeded checks.aarch64-linux.devShell-dns 2m 11s
succeeded checks.aarch64-linux.devShell-terraform 1m 55s
succeeded checks.aarch64-linux.package-action-create-pr 38s
succeeded checks.aarch64-linux.package-action-ensure-tea-login 44s
succeeded checks.aarch64-linux.package-action-flake-update 40s
succeeded checks.aarch64-linux.package-action-flake-update-pr-clan 14s
succeeded checks.aarch64-linux.package-action-flake-update-pr-clan-individual 11s
succeeded checks.aarch64-linux.package-cache-new 1m 11s
succeeded checks.aarch64-linux.package-dns 38s
succeeded checks.aarch64-linux.package-gitea 2s
succeeded checks.aarch64-linux.package-job-flake-update-clan-core 7s
succeeded checks.aarch64-linux.package-job-flake-update-clan-core-individual 16s
succeeded checks.aarch64-linux.package-job-flake-update-clan-homepage 10s
succeeded checks.aarch64-linux.package-job-flake-update-clan-infra 7s
succeeded checks.aarch64-linux.package-job-flake-update-data-mesher 18s
succeeded checks.aarch64-linux.package-terraform 31s
succeeded checks.aarch64-linux.secrets 1m 3s
succeeded checks.aarch64-linux.vars 59s
succeeded checks.x86_64-linux.devShell-cache-new 1m 32s
succeeded checks.x86_64-linux.devShell-default 1m 10s
succeeded checks.x86_64-linux.devShell-dns 1m 14s
succeeded checks.x86_64-linux.devShell-terraform 1m 23s
succeeded checks.x86_64-linux.package-action-create-pr 1s
succeeded checks.x86_64-linux.package-action-ensure-tea-login 2s
succeeded checks.x86_64-linux.package-action-flake-update 2s
succeeded checks.x86_64-linux.package-action-flake-update-pr-clan 3s
succeeded checks.x86_64-linux.package-action-flake-update-pr-clan-individual 2s
succeeded checks.x86_64-linux.package-cache-new 17s
succeeded checks.x86_64-linux.package-dns 28s
succeeded checks.x86_64-linux.package-gitea 4s
succeeded checks.x86_64-linux.package-job-flake-update-clan-core 2s
succeeded checks.x86_64-linux.package-job-flake-update-clan-core-individual 2s
succeeded checks.x86_64-linux.package-job-flake-update-clan-homepage 2s
succeeded checks.x86_64-linux.package-job-flake-update-clan-infra 2s
succeeded checks.x86_64-linux.package-job-flake-update-data-mesher 2s
succeeded checks.x86_64-linux.package-terraform 30s
succeeded checks.x86_64-linux.secrets 32s
succeeded checks.x86_64-linux.vars 43s
3 already built
skipped attributes
status attribute duration
loading…