MythEclipse/GMW
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: pin nixpkgs to specific commit for reproducible Docker builds

Browse Source 
The nixos-unstable channel changes rapidly and causes file conflicts
between packages (cacert 3.123 vs 3.117, git vs git-minimal) because
different packages are resolved from different nixpkgs snapshots during
the same profile install.

Pinning to a specific commit ensures all packages are resolved from the
same nixpkgs snapshot, eliminating version drift and file conflicts.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
MythEclipse
2026-06-01 12:34:23 +07:00
co-authored by Claude Opus 4.6
parent 65d5306764
commit 8883f2bf3a
1 changed files with 16 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+16 -13
View File
@@ -4,19 +4,22 @@ SHELL ["/bin/sh", "-c"]
ENV NIX_CONFIG="experimental-features = nix-command flakes" ENV NIX_CONFIG="experimental-features = nix-command flakes"
# Install the runtime and build dependencies through Nix instead of apt. # Pin nixpkgs to a specific commit for reproducible, conflict-free builds.
# Note: git is pulled transitively by yt-dlp as git-minimal; adding git # The nixos-unstable channel changes rapidly and causes file conflicts
# explicitly causes a file conflict (packinfo.pl) so we omit it here. # between packages (e.g., cacert 3.123 vs 3.117, git vs git-minimal).
# Pinning ensures all packages are resolved from the same nixpkgs snapshot.
ARG NIXPKGS_COMMIT=7388966642e6a20b93860e5397e996af05c0e05c
RUN nix profile install \ RUN nix profile install \
github:NixOS/nixpkgs/nixos-unstable#nodejs_22 \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#nodejs_22" \
github:NixOS/nixpkgs/nixos-unstable#ffmpeg \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#ffmpeg" \
github:NixOS/nixpkgs/nixos-unstable#python3 \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#python3" \
github:NixOS/nixpkgs/nixos-unstable#cacert \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#cacert" \
github:NixOS/nixpkgs/nixos-unstable#gnumake \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#gnumake" \
github:NixOS/nixpkgs/nixos-unstable#gcc \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#gcc" \
github:NixOS/nixpkgs/nixos-unstable#pkg-config \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#pkg-config" \
github:NixOS/nixpkgs/nixos-unstable#vips \ "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#vips" \
github:NixOS/nixpkgs/nixos-unstable#yt-dlp "github:NixOS/nixpkgs/${NIXPKGS_COMMIT}#yt-dlp"
RUN corepack enable RUN corepack enable
@@ -35,4 +38,4 @@ RUN pnpm run build
ENV NODE_ENV=production ENV NODE_ENV=production
CMD ["pnpm", "run", "start"] CMD ["pnpm", "run", "start"]