.\" -*- mode: troff; coding: utf-8 -*-
.TH "nix" "1" ""
.RS
.PP
\fBWarning\fR 
.br
This program is
\fB\fBexperimental\fR\fR
and its interface is subject to change.
.RE
.SH
Name
.LP
\f(CRnix\fR - a tool for reproducible and declarative configuration management
.SH
Synopsis
.LP
\f(CRnix\fR [\fIoption\fR\[u2026]] \fIsubcommand\fR
.PP
where \fIsubcommand\fR is one of the following:
.PP
\fBHelp commands:\fR
.IP "\(bu" 3
\fB\f(CRnix help\fR\fR - show help about \f(CRnix\fR or a particular subcommand
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix help-stores\fR\fR - show help about store types and their settings
.LP
\fBMain commands:\fR
.IP "\(bu" 3
\fB\f(CRnix build\fR\fR - build a derivation or fetch a store path
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix develop\fR\fR - run a bash shell that provides the build environment of a derivation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix flake\fR\fR - manage Nix flakes
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix profile\fR\fR - manage Nix profiles
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix run\fR\fR - run a Nix application
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix search\fR\fR - search for packages
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix shell\fR\fR - run a shell in which the specified packages are available
.LP
\fBMain commands:\fR
.IP "\(bu" 3
\fB\f(CRnix repl\fR\fR - start an interactive environment for evaluating Nix expressions
.LP
\fBInfrequently used commands:\fR
.IP "\(bu" 3
\fB\f(CRnix bundle\fR\fR - bundle an application so that it works outside of the Nix store
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix copy\fR\fR - copy paths between Nix stores
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix edit\fR\fR - open the Nix expression of a Nix package in $EDITOR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix eval\fR\fR - evaluate a Nix expression
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix fmt\fR\fR - reformat your code in the standard style
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix log\fR\fR - show the build log of the specified packages or paths, if available
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix path-info\fR\fR - query information about store paths
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix registry\fR\fR - manage the flake registry
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix why-depends\fR\fR - show why a package has another package in its closure
.LP
\fBUtility/scripting commands:\fR
.IP "\(bu" 3
\fB\f(CRnix daemon\fR\fR - daemon to perform store operations on behalf of non-root clients
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix derivation\fR\fR - Work with derivations, Nix\(cqs notion of a build plan.
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix hash\fR\fR - compute and convert cryptographic hashes
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix key\fR\fR - generate and convert Nix signing keys
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix nar\fR\fR - create or inspect NAR files
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix print-dev-env\fR\fR - print shell code that can be sourced by bash to reproduce the build environment of a derivation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix realisation\fR\fR - manipulate a Nix realisation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix show-config\fR\fR - show the Nix configuration or the value of a specific setting
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix store\fR\fR - manipulate a Nix store
.LP
\fBCommands for upgrading or troubleshooting your Nix installation:\fR
.IP "\(bu" 3
\fB\f(CRnix doctor\fR\fR - check your system for potential problems and print a PASS or FAIL for each check
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fB\f(CRnix upgrade-nix\fR\fR - upgrade Nix to the stable version declared in Nixpkgs
.SH
Examples
.IP "\(bu" 3
Create a new flake:
.LP
.EX
# nix flake new hello
# cd hello
.EE
.IP "\(bu" 3
Build the flake in the current directory:
.LP
.EX
# nix build
# ./result/bin/hello
Hello, world!
.EE
.IP "\(bu" 3
Run the flake in the current directory:
.LP
.EX
# nix run
Hello, world!
.EE
.IP "\(bu" 3
Start a development shell for hacking on this flake:
.LP
.EX
# nix develop
# unpackPhase
# cd hello-*
# configurePhase
# buildPhase
# ./hello
Hello, world!
# installPhase
# ../outputs/out/bin/hello
Hello, world!
.EE
.SH
Description
.LP
Nix is a tool for building software, configurations and other
artifacts in a reproducible and declarative way. For more information,
see the \fBNix homepage\fR or the \fBNix
manual\fR.
.SH
Installables
.RS
.LP
\fBWarning\fR 
.br
Installables are part of the unstable
\fB\f(CRnix-command\fR experimental feature\fR,
and subject to change without notice.
.RE
.PP
Many \f(CRnix\fR subcommands operate on one or more \fIinstallables\fR.
These are command line arguments that represent something that can be realised in the Nix store.
.PP
The following types of installable are supported by most commands:
.IP "\(bu" 3
\fBFlake output attribute\fR (experimental)
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fBStore path\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fBNix file\fR, optionally qualified by an attribute path
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\fBNix expression\fR, optionally qualified by an attribute path
.LP
For most commands, if no installable is specified, \f(CR.\fR is assumed.
That is, Nix will operate on the default flake output attribute of the flake in the current directory.
.SS
Flake output attribute
.RS
.LP
\fBWarning\fR 
.br
Flake output attribute installables depend on both the
\fB\f(CRflakes\fR\fR
and
\fB\f(CRnix-command\fR\fR
experimental features, and subject to change without notice.
.RE
.PP
Example: \f(CRnixpkgs#hello\fR
.PP
These have the form \fIflakeref\fR[\f(CR#\fR\fIattrpath\fR], where \fIflakeref\fR is a
\fBflake reference\fR and \fIattrpath\fR is an optional attribute path. For
more information on flakes, see \fBthe \f(CRnix flake\fR manual
page\fR.  Flake references are most commonly a flake
identifier in the flake registry (e.g. \f(CRnixpkgs\fR), or a raw path
(e.g. \f(CR/path/to/my-flake\fR or \f(CR.\fR or \f(CR../foo\fR), or a full URL
(e.g. \f(CRgithub:nixos/nixpkgs\fR or \f(CRpath:.\fR)
.PP
When the flake reference is a raw path (a path without any URL
scheme), it is interpreted as a \f(CRpath:\fR or \f(CRgit+file:\fR url in the following
way:
.IP "\(bu" 3
If the path is within a Git repository, then the url will be of the form
\f(CRgit+file://[GIT_REPO_ROOT]?dir=[RELATIVE_FLAKE_DIR_PATH]\fR
where \f(CRGIT_REPO_ROOT\fR is the path to the root of the git repository,
and \f(CRRELATIVE_FLAKE_DIR_PATH\fR is the path (relative to the directory
root) of the closest parent of the given path that contains a \f(CRflake.nix\fR within
the git repository.
If no such directory exists, then Nix will error-out.
.IP
Note that the search will only include files indexed by git. In particular, files
which are matched by \f(CR.gitignore\fR or have never been \f(CRgit add\fR-ed will not be
available in the flake. If this is undesirable, specify \f(CRpath:<directory>\fR explicitly;
.IP
For example, if \f(CR/foo/bar\fR is a git repository with the following structure:
.LP
.EX
\&.
└── baz
  ├── blah
  │   └── file.txt
  └── flake.nix
.EE
.IP
Then \f(CR/foo/bar/baz/blah\fR will resolve to \f(CRgit+file:///foo/bar?dir=baz\fR
.IP "\(bu" 3
If the supplied path is not a git repository, then the url will have the form
\f(CRpath:FLAKE_DIR_PATH\fR where \f(CRFLAKE_DIR_PATH\fR is the closest parent
of the supplied path that contains a \f(CRflake.nix\fR file (within the same file-system).
If no such directory exists, then Nix will error-out.
.IP
For example, if \f(CR/foo/bar/flake.nix\fR exists, then \f(CR/foo/bar/baz/\fR will resolve to
\f(CRpath:/foo/bar\fR
.LP
If \fIattrpath\fR is omitted, Nix tries some default values; for most
subcommands, the default is \f(CRpackages.\fR\fIsystem\fR\f(CR.default\fR
(e.g. \f(CRpackages.x86_64-linux.default\fR), but some subcommands have
other defaults. If \fIattrpath\fR \fIis\fR specified, \fIattrpath\fR is
interpreted as relative to one or more prefixes; for most
subcommands, these are \f(CRpackages.\fR\fIsystem\fR,
\f(CRlegacyPackages.*system*\fR and the empty prefix. Thus, on
\f(CRx86_64-linux\fR \f(CRnix build nixpkgs#hello\fR will try to build the
attributes \f(CRpackages.x86_64-linux.hello\fR,
\f(CRlegacyPackages.x86_64-linux.hello\fR and \f(CRhello\fR.
.SS
Store path
.LP
Example: \f(CR/nix/store/v5sv61sszx301i0x6xysaqzla09nksnd-hello-2.10\fR
.PP
These are paths inside the Nix store, or symlinks that resolve to a path in the Nix store.
.PP
A \fBstore derivation\fR is also addressed by store path.
.PP
Example: \f(CR/nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv\fR
.PP
If you want to refer to an output path of that store derivation, add the output name preceded by a caret (\f(CR\(ha\fR).
.PP
Example: \f(CR/nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv\(haout\fR
.PP
All outputs can be referred to at once with the special syntax \f(CR\(ha*\fR.
.PP
Example: \f(CR/nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv\(ha*\fR
.SS
Nix file
.LP
Example: \f(CR--file /path/to/nixpkgs hello\fR
.PP
When the option \f(CR-f\fR / \f(CR--file\fR \fIpath\fR [\fIattrpath\fR\[u2026]] is given, installables are interpreted as the value of the expression in the Nix file at \fIpath\fR.
If attribute paths are provided, commands will operate on the corresponding values accessible at these paths.
The Nix expression in that file, or any selected attribute, must evaluate to a derivation.
.SS
Nix expression
.LP
Example: \f(CR--expr 'import <nixpkgs> {}' hello\fR
.PP
When the option \f(CR--expr\fR \fIexpression\fR [\fIattrpath\fR\[u2026]] is given, installables are interpreted as the value of the of the Nix expression.
If attribute paths are provided, commands will operate on the corresponding values accessible at these paths.
The Nix expression, or any selected attribute, must evaluate to a derivation.
.PP
You may need to specify \f(CR--impure\fR if the expression references impure inputs (such as \f(CR<nixpkgs>\fR).
.SS
Derivation output selection
.LP
Derivations can have multiple outputs, each corresponding to a
different store path. For instance, a package can have a \f(CRbin\fR output
that contains programs, and a \f(CRdev\fR output that provides development
artifacts like C/C++ header files. The outputs on which \f(CRnix\fR commands
operate are determined as follows:
.IP "\(bu" 3
You can explicitly specify the desired outputs using the syntax
\fIinstallable\fR\f(CR\(ha\fR\fIoutput1\fR\f(CR,\fR\fI\[u2026]\fR\f(CR,\fR\fIoutputN\fR. For example, you can
obtain the \f(CRdev\fR and \f(CRstatic\fR outputs of the \f(CRglibc\fR package:
.LP
.EX
# nix build 'nixpkgs#glibc\(hadev,static'
# ls ./result-dev/include/ ./result-static/lib/
…
.EE
.IP
and likewise, using a store path to a \(lqdrv\(rq file to specify the derivation:
.LP
.EX
# nix build '/nix/store/gzaflydcr6sb3567hap9q6srzx8ggdgg-glibc-2.33-78.drv\(hadev,static'
…
.EE
.IP "\(bu" 3
You can also specify that \fIall\fR outputs should be used using the
syntax \fIinstallable\fR\f(CR\(ha*\fR. For example, the following shows the size
of all outputs of the \f(CRglibc\fR package in the binary cache:
.LP
.EX
# nix path-info --closure-size --eval-store auto --store https://cache.nixos.org 'nixpkgs#glibc\(ha*'
/nix/store/g02b1lpbddhymmcjb923kf0l7s9nww58-glibc-2.33-123                 33208200
/nix/store/851dp95qqiisjifi639r0zzg5l465ny4-glibc-2.33-123-bin             36142896
/nix/store/kdgs3q6r7xdff1p7a9hnjr43xw2404z7-glibc-2.33-123-debug          155787312
/nix/store/n4xa8h6pbmqmwnq0mmsz08l38abb06zc-glibc-2.33-123-static          42488328
/nix/store/q6580lr01jpcsqs4r5arlh4ki2c1m9rv-glibc-2.33-123-dev             44200560
.EE
.IP
and likewise, using a store path to a \(lqdrv\(rq file to specify the derivation:
.LP
.EX
# nix path-info --closure-size '/nix/store/gzaflydcr6sb3567hap9q6srzx8ggdgg-glibc-2.33-78.drv\(ha*'
…
.EE
.IP "\(bu" 3
If you didn\(cqt specify the desired outputs, but the derivation has an
attribute \f(CRmeta.outputsToInstall\fR, Nix will use those outputs. For
example, since the package \f(CRnixpkgs#libxml2\fR has this attribute:
.LP
.EX
# nix eval 'nixpkgs#libxml2.meta.outputsToInstall'
[ \(dqbin\(dq \(dqman\(dq ]
.EE
.IP
a command like \f(CRnix shell nixpkgs#libxml2\fR will provide only those
two outputs by default.
.IP
Note that a \fBstore derivation\fR doesn\(cqt have
any attributes like \f(CRmeta\fR, and thus this case doesn\(cqt apply to it.
.IP "\(bu" 3
Otherwise, Nix will use all outputs of the derivation.
.SH
Nix stores
.LP
Most \f(CRnix\fR subcommands operate on a \fINix store\fR. These are documented
in \fB\f(CRnix help-stores\fR\fR.
.SH
Options
.LP
\fBLogging-related options:\fR
.IP "\(bu" 3
\fB\f(CR--debug\fR\fR
.IP
Set the logging verbosity level to \(oqdebug\(cq.
.IP "\(bu" 3
\fB\f(CR--log-format\fR\fR \fIformat\fR
.IP
Set the format of log output; one of \f(CRraw\fR, \f(CRinternal-json\fR, \f(CRbar\fR or \f(CRbar-with-logs\fR.
.IP "\(bu" 3
\fB\f(CR--print-build-logs\fR\fR / \f(CR-L\fR
.IP
Print full build logs on standard error.
.IP "\(bu" 3
\fB\f(CR--quiet\fR\fR
.IP
Decrease the logging verbosity level.
.IP "\(bu" 3
\fB\f(CR--verbose\fR\fR / \f(CR-v\fR
.IP
Increase the logging verbosity level.
.LP
\fBMiscellaneous global options:\fR
.IP "\(bu" 3
\fB\f(CR--help\fR\fR
.IP
Show usage information.
.IP "\(bu" 3
\fB\f(CR--offline\fR\fR
.IP
Disable substituters and consider all previously downloaded files up-to-date.
.IP "\(bu" 3
\fB\f(CR--option\fR\fR \fIname\fR \fIvalue\fR
.IP
Set the Nix configuration setting \fIname\fR to \fIvalue\fR (overriding \f(CRnix.conf\fR).
.IP "\(bu" 3
\fB\f(CR--refresh\fR\fR
.IP
Consider all previously downloaded files out-of-date.
.IP "\(bu" 3
\fB\f(CR--version\fR\fR
.IP
Show version information.
.LP
\fBOptions to override configuration settings:\fR
.IP "\(bu" 3
\fB\f(CR--accept-flake-config\fR\fR
.IP
Enable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--access-tokens\fR\fR \fIvalue\fR
.IP
Set the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-dirty\fR\fR
.IP
Enable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-import-from-derivation\fR\fR
.IP
Enable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-new-privileges\fR\fR
.IP
Enable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-symlinked-store\fR\fR
.IP
Enable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Enable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-uris\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-allocate-uids\fR\fR
.IP
Enable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-optimise-store\fR\fR
.IP
Enable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-prefix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-prefix\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-poll-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-poll-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-users-group\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-users-group\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuilders\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders-use-substitutes\fR\fR
.IP
Enable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--commit-lockfile-summary\fR\fR \fIvalue\fR
.IP
Set the \f(CRcommit-lockfile-summary\fR setting.
.IP "\(bu" 3
\fB\f(CR--compress-build-log\fR\fR
.IP
Enable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--connect-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRconnect-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--cores\fR\fR \fIvalue\fR
.IP
Set the \f(CRcores\fR setting.
.IP "\(bu" 3
\fB\f(CR--diff-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRdiff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-attempts\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-attempts\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-speed\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-speed\fR setting.
.IP "\(bu" 3
\fB\f(CR--eval-cache\fR\fR
.IP
Enable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--experimental-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-access-tokens\fR\fR \fIvalue\fR
.IP
Append to the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-uris\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-build-hook\fR\fR \fIvalue\fR
.IP
Append to the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-experimental-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-extra-platforms\fR\fR \fIvalue\fR
.IP
Append to the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-hashed-mirrors\fR\fR \fIvalue\fR
.IP
Append to the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-ignored-acls\fR\fR \fIvalue\fR
.IP
Append to the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-nix-path\fR\fR \fIvalue\fR
.IP
Append to the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-platforms\fR\fR \fIvalue\fR
.IP
Set the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-plugin-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-sandbox-paths\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-secret-key-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-system-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-public-keys\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--fallback\fR\fR
.IP
Enable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--filter-syscalls\fR\fR
.IP
Enable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--flake-registry\fR\fR \fIvalue\fR
.IP
Set the \f(CRflake-registry\fR setting.
.IP "\(bu" 3
\fB\f(CR--fsync-metadata\fR\fR
.IP
Enable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--gc-reserved-space\fR\fR \fIvalue\fR
.IP
Set the \f(CRgc-reserved-space\fR setting.
.IP "\(bu" 3
\fB\f(CR--hashed-mirrors\fR\fR \fIvalue\fR
.IP
Set the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--http-connections\fR\fR \fIvalue\fR
.IP
Set the \f(CRhttp-connections\fR setting.
.IP "\(bu" 3
\fB\f(CR--http2\fR\fR
.IP
Enable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--id-count\fR\fR \fIvalue\fR
.IP
Set the \f(CRid-count\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignore-try\fR\fR
.IP
Enable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignored-acls\fR\fR \fIvalue\fR
.IP
Set the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--impersonate-linux-26\fR\fR
.IP
Enable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-build-log\fR\fR
.IP
Enable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-derivations\fR\fR
.IP
Enable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-env-derivations\fR\fR
.IP
Enable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-failed\fR\fR
.IP
Enable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-going\fR\fR
.IP
Enable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-outputs\fR\fR
.IP
Enable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--log-lines\fR\fR \fIvalue\fR
.IP
Set the \f(CRlog-lines\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-build-log-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-build-log-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-silent-time\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-silent-time\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-substitution-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-substitution-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free-check-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free-check-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--nar-buffer-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRnar-buffer-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-negative-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-negative-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-positive-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-positive-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--netrc-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRnetrc-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--nix-path\fR\fR \fIvalue\fR
.IP
Set the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-accept-flake-config\fR\fR
.IP
Disable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-dirty\fR\fR
.IP
Disable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-import-from-derivation\fR\fR
.IP
Disable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-new-privileges\fR\fR
.IP
Disable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-symlinked-store\fR\fR
.IP
Disable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Disable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-allocate-uids\fR\fR
.IP
Disable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-optimise-store\fR\fR
.IP
Disable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-builders-use-substitutes\fR\fR
.IP
Disable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-compress-build-log\fR\fR
.IP
Disable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-eval-cache\fR\fR
.IP
Disable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fallback\fR\fR
.IP
Disable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-filter-syscalls\fR\fR
.IP
Disable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fsync-metadata\fR\fR
.IP
Disable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-http2\fR\fR
.IP
Disable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-ignore-try\fR\fR
.IP
Disable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-impersonate-linux-26\fR\fR
.IP
Disable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-build-log\fR\fR
.IP
Disable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-derivations\fR\fR
.IP
Disable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-env-derivations\fR\fR
.IP
Disable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-failed\fR\fR
.IP
Disable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-going\fR\fR
.IP
Disable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-outputs\fR\fR
.IP
Disable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-preallocate-contents\fR\fR
.IP
Disable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-print-missing\fR\fR
.IP
Disable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-pure-eval\fR\fR
.IP
Disable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-drop-supplementary-groups\fR\fR
.IP
Disable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-sigs\fR\fR
.IP
Disable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-restrict-eval\fR\fR
.IP
Disable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-run-diff-hook\fR\fR
.IP
Disable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sandbox\fR\fR
.IP
Disable sandboxing.
.IP "\(bu" 3
\fB\f(CR--no-sandbox-fallback\fR\fR
.IP
Disable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-show-trace\fR\fR
.IP
Disable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-substitute\fR\fR
.IP
Disable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sync-before-registering\fR\fR
.IP
Disable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-function-calls\fR\fR
.IP
Disable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-verbose\fR\fR
.IP
Disable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-case-hack\fR\fR
.IP
Disable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-cgroups\fR\fR
.IP
Disable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-registries\fR\fR
.IP
Disable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-sqlite-wal\fR\fR
.IP
Disable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-xdg-base-directories\fR\fR
.IP
Disable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-warn-dirty\fR\fR
.IP
Disable the \f(CRwarn-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--plugin-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--post-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpost-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--pre-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpre-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--preallocate-contents\fR\fR
.IP
Enable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--print-missing\fR\fR
.IP
Enable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--pure-eval\fR\fR
.IP
Enable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--relaxed-sandbox\fR\fR
.IP
Enable sandboxing, but allow builds to disable it.
.IP "\(bu" 3
\fB\f(CR--require-drop-supplementary-groups\fR\fR
.IP
Enable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--require-sigs\fR\fR
.IP
Enable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--restrict-eval\fR\fR
.IP
Enable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--run-diff-hook\fR\fR
.IP
Enable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox\fR\fR
.IP
Enable sandboxing.
.IP "\(bu" 3
\fB\f(CR--sandbox-build-dir\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-build-dir\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-dev-shm-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-dev-shm-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-fallback\fR\fR
.IP
Enable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-paths\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--secret-key-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--show-trace\fR\fR
.IP
Enable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--ssl-cert-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRssl-cert-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--stalled-download-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRstalled-download-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--start-id\fR\fR \fIvalue\fR
.IP
Set the \f(CRstart-id\fR setting.
.IP "\(bu" 3
\fB\f(CR--store\fR\fR \fIvalue\fR
.IP
Set the \f(CRstore\fR setting.
.IP "\(bu" 3
\fB\f(CR--substitute\fR\fR
.IP
Enable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--sync-before-registering\fR\fR
.IP
Enable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--system\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem\fR setting.
.IP "\(bu" 3
\fB\f(CR--system-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--tarball-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRtarball-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRtimeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-function-calls\fR\fR
.IP
Enable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-verbose\fR\fR
.IP
Enable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-public-keys\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-case-hack\fR\fR
.IP
Enable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-cgroups\fR\fR
.IP
Enable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-registries\fR\fR
.IP
Enable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-sqlite-wal\fR\fR
.IP
Enable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-xdg-base-directories\fR\fR
.IP
Enable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--user-agent-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRuser-agent-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--warn-dirty\fR\fR
.IP
Enable the \f(CRwarn-dirty\fR setting.