GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB error: … while evaluating attribute 'drv' at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:14:3: 13| { 14| drv = p.drvPath; | ^ 15| name = p.name; … while evaluating the attribute 'drvPath' at /nix/store/4fara6sxal0r410myx7fh413zr1gsn51-source/lib/customisation.nix:418:7: 417| // { 418| drvPath = | ^ 419| assert condition; (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Package ‘olm-3.2.16’ in /nix/store/4fara6sxal0r410myx7fh413zr1gsn51-source/pkgs/by-name/ol/olm/package.nix:37 is marked as insecure, refusing to evaluate. Known issues: - The libolm end‐to‐end encryption library used in many Matrix clients and Jitsi Meet has been deprecated upstream, and relies on a cryptography library that has known side‐channel issues and disclaims that its implementations are not cryptographically secure and should not be used when cryptographic security is required. It is not known if the issues can be exploited over the network in practical conditions. Upstream does not believe such an attack is feasible, but has stated that the library should not be used going forward, and there are no plans to move to another cryptography implementation or otherwise further maintain the library at all. You should make an informed decision about whether to override this security warning, especially if you critically rely on end‐to‐end encryption. If you don’t care about that, or don’t use the Matrix functionality of a multi‐protocol client depending on libolm, then there should be no additional risk. Some clients are investigating migrating away from libolm to maintained libraries without known vulnerabilities. For further information, see: * The CVE records for the known vulnerabilities: * CVE-2024-45191 * CVE-2024-45192 * CVE-2024-45193 * The libolm deprecation notice: * The warning from the cryptography code used by libolm: * The blog post disclosing the details of the known vulnerabilities: * The statement about the deprecation and vulnerabilities from the Matrix.org Foundation: * A (likely incomplete) aggregation of client tracking issue links: You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) for `nixos-rebuild` you can add ‘olm-3.2.16’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "olm-3.2.16" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘olm-3.2.16’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "olm-3.2.16" ]; } GC Warning: Failed to expand heap by 4194304 KiB error: … while evaluating attribute 'drv' at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:14:3: 13| { 14| drv = p.drvPath; | ^ 15| name = p.name; … while evaluating the attribute 'drvPath' at /nix/store/qmj59v393gd39m4dfk9hh14a0glgwjiq-source/lib/customisation.nix:418:7: 417| // { 418| drvPath = | ^ 419| assert condition; (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Package ‘olm-3.2.16’ in /nix/store/qmj59v393gd39m4dfk9hh14a0glgwjiq-source/pkgs/by-name/ol/olm/package.nix:37 is marked as insecure, refusing to evaluate. Known issues: - The libolm end‐to‐end encryption library used in many Matrix clients and Jitsi Meet has been deprecated upstream, and relies on a cryptography library that has known side‐channel issues and disclaims that its implementations are not cryptographically secure and should not be used when cryptographic security is required. It is not known if the issues can be exploited over the network in practical conditions. Upstream does not believe such an attack is feasible, but has stated that the library should not be used going forward, and there are no plans to move to another cryptography implementation or otherwise further maintain the library at all. You should make an informed decision about whether to override this security warning, especially if you critically rely on end‐to‐end encryption. If you don’t care about that, or don’t use the Matrix functionality of a multi‐protocol client depending on libolm, then there should be no additional risk. Some clients are investigating migrating away from libolm to maintained libraries without known vulnerabilities. For further information, see: * The CVE records for the known vulnerabilities: * CVE-2024-45191 * CVE-2024-45192 * CVE-2024-45193 * The libolm deprecation notice: * The warning from the cryptography code used by libolm: * The blog post disclosing the details of the known vulnerabilities: * The statement about the deprecation and vulnerabilities from the Matrix.org Foundation: * A (likely incomplete) aggregation of client tracking issue links: You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) for `nixos-rebuild` you can add ‘olm-3.2.16’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "olm-3.2.16" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘olm-3.2.16’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "olm-3.2.16" ]; } GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB error: … while evaluating attribute 'drv' at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:14:3: 13| { 14| drv = p.drvPath; | ^ 15| name = p.name; … while evaluating the attribute 'drvPath' at /nix/store/8ni76q2r34gc0nycdcfs5nqn3bbwbaya-source/lib/customisation.nix:418:7: 417| // { 418| drvPath = | ^ 419| assert condition; (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Package ‘libbsd-0.12.2’ in /nix/store/8ni76q2r34gc0nycdcfs5nqn3bbwbaya-source/pkgs/by-name/li/libbsd/package.nix:49 is marked as broken, refusing to evaluate. a) To temporarily allow broken packages, you can use an environment variable for a single invocation of the nix tools. $ export NIXPKGS_ALLOW_BROKEN=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) For `nixos-rebuild` you can set { nixpkgs.config.allowBroken = true; } in configuration.nix to override this. c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add { allowBroken = true; } to ~/.config/nixpkgs/config.nix. GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB error: … while evaluating attribute 'drv' at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:14:3: 13| { 14| drv = p.drvPath; | ^ 15| name = p.name; … while evaluating the attribute 'drvPath' at /nix/store/bjbd2vx16sd024341qjxvw1kcymmw1wp-source/lib/customisation.nix:418:7: 417| // { 418| drvPath = | ^ 419| assert condition; (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Package ‘qtwebkit-5.212.0-alpha4’ in /nix/store/bjbd2vx16sd024341qjxvw1kcymmw1wp-source/pkgs/development/libraries/qt-5/qtModule.nix:113 is marked as insecure, refusing to evaluate. Known issues: - QtWebkit upstream is unmaintained and receives no security updates, see https://blogs.gnome.org/mcatanzaro/2022/11/04/stop-using-qtwebkit/ You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) for `nixos-rebuild` you can add ‘qtwebkit-5.212.0-alpha4’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "qtwebkit-5.212.0-alpha4" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘qtwebkit-5.212.0-alpha4’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "qtwebkit-5.212.0-alpha4" ]; } GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB error: … while evaluating attribute 'patches' at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:28:3: 27| hostPlatform = p.stdenv.hostPlatform.config or null; 28| patches = map toString (p.patches or [ ]); | ^ 29| roles = … while calling the 'map' builtin at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:28:13: 27| hostPlatform = p.stdenv.hostPlatform.config or null; 28| patches = map toString (p.patches or [ ]); | ^ 29| roles = (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: expected a list but found a set: { type = "derivation"; __ignoreNulls = true; __structuredAttrs = false; all = «thunk»; allowSubstitutes = false; args = [ "-e" /nix/store/7y1cx3f44z192plv1lzj2y2b51n18ds7-source/pkgs/stdenv/generic/source-stdenv.sh /nix/store/7y1cx3f44z192plv1lzj2y2b51n18ds7-source/pkgs/stdenv/generic/default-builder.sh ]; buildInputs = [ ]; buildPhase = "runHook preBuild\n\ntarget=$out\nif test -n \"$dir\"; then\n target=$out/$dir/$name\n mkdir -p $out/$dir\nfi\n\nsubstitute \"$src\" \"$target\" --replace-fail @graphviz@ /nix/store/gqw1csircpi2cgi5fryczm7xvrsv8y7s-graphviz-x86_64-unknown-linux-gnufilc0-12.2.1\n\nif test -n \"$isExecutable\"; then\n chmod +x $target\nfi\n\nrunHook postBuild\n"; builder = "/nix/store/cfqbabpc7xwg8akbcchqbq3cai6qq2vs-bash-5.2p37/bin/bash"; checkPhase = "runHook preCheck\nif grep -Pqe '@[a-zA-Z_][0-9A-Za-z_'\\''-]*@' \"$target\"; then\n echo The following look like unsubstituted Nix identifiers that remain in \"$target\":\n grep -Poe '@[a-zA-Z_][0-9A-Za-z_'\\''-]*@' \"$target\"\n echo Use the more precise '`substitute`' function if this check is in error.\n exit 1\nfi\nrunHook postCheck\n"; «35 attributes elided» } GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB error: … while evaluating attribute 'drv' at /nix/store/64fw1c0wc25rqrs9gf975pj6p8fvfyjb-filnix-experiment-0.12.4/lib/experiment/planner.nix:14:3: 13| { 14| drv = p.drvPath; | ^ 15| name = p.name; … while evaluating the attribute 'drvPath' at /nix/store/wj5g5dqyxg339agqzy8nrclp46dych3m-source/lib/customisation.nix:418:7: 417| // { 418| drvPath = | ^ 419| assert condition; (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: cannot coerce null to a string: null GC Warning: Failed to expand heap by 4194304 KiB GC Warning: Failed to expand heap by 4194304 KiB