Aktionen
Aufgabe #2241
geschlossenAufgabe #2240: Manueller Check "nixos-rebuild switch" aller Nixos Container / VMs
Error beim Upgrade von Redmine
Beginn:
14.02.2025
Abgabedatum:
% erledigt:
0%
Geschätzter Aufwand:
Beschreibung
[root@pro:~]# nixos-rebuild switch --upgrade
unpacking 1 channels...
building Nix...
building the system configuration...
error:
… while calling the 'head' builtin
at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/attrsets.nix:1:35741:
… while evaluating the attribute 'value'
at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/modules.nix:1:33591:
… while evaluating the option `system.build.toplevel':
… while evaluating definitions from `/nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/activation/top-level.nix':
… while evaluating the option `warnings':
… while evaluating definitions from `/nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/boot/systemd.nix':
… while evaluating the option `systemd.services.redmine.serviceConfig':
… while evaluating definitions from `/nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/boot/systemd.nix':
… while evaluating the option `systemd.services.redmine.preStart':
… while evaluating definitions from `/nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/services/misc/redmine.nix':
(stack trace truncated; use '--show-trace' to show the full, detailed trace)
error: Package ‘redmine-5.1.5’ in /nix/store/29ar3c1fc655xdnjzsg2mqhj98yzrv6k-nixos-24.11/nixos/pkgs/by-name/re/redmine/package.nix:15 is marked as insecure, refusing to evaluate.
Known issues:
- CVE-2024-54133
- GHSA-r95h-9x8f-r3f7
You can install it anyway by allowing this package, using the
following methods:
a) To temporarily allow all insecure packages, you can use an environment
variable for a single invocation of the nix tools:
$ export NIXPKGS_ALLOW_INSECURE=1
Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
then pass `--impure` in order to allow use of environment variables.
b) for `nixos-rebuild` you can add ‘redmine-5.1.5’ to
`nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
like so:
{
nixpkgs.config.permittedInsecurePackages = [
"redmine-5.1.5"
];
}
c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
‘redmine-5.1.5’ to `permittedInsecurePackages` in
~/.config/nixpkgs/config.nix, like so:
{
permittedInsecurePackages = [
"redmine-5.1.5"
];
}
Aktionen