staging-next 2025-07-04

[vcunat]

Helpful links

• workflow docs: https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md#staging
• important jobs:
  https://hydra.nixos.org/job/nixpkgs/staging-next/unstable#tabs-constituents
  https://hydra.nixos.org/job/nixos/staging-next-small/tested
• jobsets:
  https://hydra.nixos.org/jobset/nixpkgs/staging-next
  https://hydra.nixos.org/jobset/nixos/staging-next-small
• nix-review reports: https://malob.github.io/nix-review-tools-reports/
• previous staging-next: staging-next 2025-05-30 #412425

Important breakages

nothing notable so far

[juliusrickert]

I can't pin it down to a specific commit for now, but – according to git bisect start --first-parent – since this PR found its way into nixpkgs-unstable, our container images, built with pkgs.dockerTools.buildLayeredImage, no longer work.

Details:

$ git checkout nixpkgs-unstable
$ git rev-parse HEAD
2baf8e1658cba84a032c3a8befb1e7b06629242a
$ git bisect start --first-parent
$ git bisect good ceb24d94c6feaa4e8737a8e2bd3cf71c3a7eaaa0
$ git bisect bad 6b4955211758ba47fac850c040a27f23b9b4008f
$ git bisect run sh -c "nix build --print-build-logs --verbose --no-update-lock-file --override-input nixpkgs $(pwd) /root/project#packages.x86_64-linux.oci_image
<…>
b47d4f01d4213715a1f09b999bab96bb6a5b675e is the first bad commit
commit b47d4f01d4213715a1f09b999bab96bb6a5b675e
Merge: b2e5044b3e79 a82a7e5045b5
Author: Vladimír Čunát <v@cunat.cz>
Date:   Sun Jul 13 19:33:14 2025 +0200

    staging-next 2025-07-04 (#422427)

Excerpt from the build logs:

these 5 derivations will be built:
  /nix/store/my0qi1h6q3kkqmwp62s85gbhygpqc9j5-foo-customisation-layer.drv
  /nix/store/a71fkwnqn1iz2jp8l63w75cbxxyiwyv9-docker-layers.drv
  /nix/store/wp8wf0m2kkb15pabc0rws7yc2nrd5cip-foo-conf.json.drv
  /nix/store/wnbvligwqmxc064cipq135rn5qcbsyrq-stream-foo.drv
  /nix/store/54s0bhjc594f0xfv33kla6kyrkjdg7g2-foo.tar.gz.drv
building '/nix/store/my0qi1h6q3kkqmwp62s85gbhygpqc9j5-foo-customisation-layer.drv'...
foo-customisation-layer> proot warning: can't sanitize binding "/sys/": No such file or directory
foo-customisation-layer> proot warning: can't sanitize binding "/nix/store/5chahxg9lvs7d0617zn3lqqkydh4rsh3-foo-customisation-layer/layer.tar": No such file or directory
error: builder for '/nix/store/my0qi1h6q3kkqmwp62s85gbhygpqc9j5-foo-customisation-layer.drv' failed with exit code 1;
       last 2 log lines:
       > proot warning: can't sanitize binding "/sys/": No such file or directory
       > proot warning: can't sanitize binding "/nix/store/5chahxg9lvs7d0617zn3lqqkydh4rsh3-foo-customisation-layer/layer.tar": No such file or directory
       For full logs, run 'nix log /nix/store/my0qi1h6q3kkqmwp62s85gbhygpqc9j5-foo-customisation-layer.drv'.
error: 1 dependencies of derivation '/nix/store/wp8wf0m2kkb15pabc0rws7yc2nrd5cip-foo-conf.json.drv' failed to build
error: 1 dependencies of derivation '/nix/store/wnbvligwqmxc064cipq135rn5qcbsyrq-stream-foo.drv' failed to build
error: 1 dependencies of derivation '/nix/store/54s0bhjc594f0xfv33kla6kyrkjdg7g2-foo.tar.gz.drv' failed to build

I'm working on a minimal reproducible example.